vpn1
Sat Jun 23 07:25:05 PDT 2001
+ _________________________
+ ipsec --version
Linux FreeS/WAN 1.91
See `ipsec --copyright' for copyright information.
+ _________________________
+ cat /proc/version
Linux version 2.4.5 (root@vpn1) (gcc version 2.96 20000731 (Linux-Mandrake 8.0 2.96-0.48mdk)) #3 SMP Thu Jun 21 19:09:59 PDT 2001
+ _________________________
+ cat /proc/net/ipsec_eroute
0          10.1.0.0/16        -> 192.168.2.11/32    => tun0x1004@64.174.43.34
+ _________________________
+ cat /proc/net/ipsec_spi
esp0xb38ce7a8@64.174.43.34 ESP_3DES_HMAC_MD5: dir=out src=209.1.1.86 iv_bits=64bits iv=0x541e32dc3479c54a ooowin=64 alen=128 aklen=128 eklen=192 life(c,s,h)=add(130,0,0)
esp0xce9af7c1@64.174.43.34 ESP_3DES_HMAC_MD5: dir=out src=209.1.1.86 iv_bits=64bits iv=0x2310e0bc873700f3 ooowin=64 seq=766 alen=128 aklen=128 eklen=192 life(c,s,h)=bytes(85792,0,0)add(1062,0,0)use(1058,0,0)packets(766,0,0) idle=293
tun0x1003@209.1.1.86 IPIP: dir=in  src=64.174.43.34 life(c,s,h)=bytes(6240,0,0)add(130,0,0)use(130,0,0)packets(78,0,0) idle=53
tun0x1001@209.1.1.86 IPIP: dir=in  src=64.174.43.34 life(c,s,h)=bytes(74320,0,0)add(1062,0,0)use(1062,0,0)packets(929,0,0) idle=131
tun0x1004@64.174.43.34 IPIP: dir=out src=209.1.1.86 life(c,s,h)=add(130,0,0)
esp0x1fdedd1d@209.1.1.86 ESP_3DES_HMAC_MD5: dir=in  src=64.174.43.34 iv_bits=64bits iv=0x0249bbe74f11f68f ooowin=64 seq=78 bit=0xffffffffffffffff alen=128 aklen=128 eklen=192 life(c,s,h)=bytes(6240,0,0)add(130,0,0)use(130,0,0)packets(78,0,0) idle=53
tun0x1002@64.174.43.34 IPIP: dir=out src=209.1.1.86 life(c,s,h)=bytes(61280,0,0)add(1062,0,0)use(1058,0,0)packets(766,0,0) idle=293
esp0x1fdedd1c@209.1.1.86 ESP_3DES_HMAC_MD5: dir=in  src=64.174.43.34 iv_bits=64bits iv=0x59f53cffbdcf205c ooowin=64 seq=929 bit=0xffffffffffffffff alen=128 aklen=128 eklen=192 life(c,s,h)=bytes(74320,0,0)add(1062,0,0)use(1062,0,0)packets(929,0,0) idle=131
+ _________________________
+ cat /proc/net/ipsec_spigrp
tun0x1003@209.1.1.86 esp0x1fdedd1d@209.1.1.86 
tun0x1001@209.1.1.86 esp0x1fdedd1c@209.1.1.86 
tun0x1004@64.174.43.34 esp0xb38ce7a8@64.174.43.34 
tun0x1002@64.174.43.34 esp0xce9af7c1@64.174.43.34 
+ _________________________
+ netstat -nr
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
192.168.2.11    209.1.1.81      255.255.255.255 UGH      40 0          0 ipsec0
207.82.50.64    192.168.2.1     255.255.255.192 UG       40 0          0 eth1
192.168.2.0     0.0.0.0         255.255.255.0   U        40 0          0 eth1
209.1.1.0       0.0.0.0         255.255.255.0   U        40 0          0 eth0
209.1.1.0       0.0.0.0         255.255.255.0   U        40 0          0 ipsec0
10.1.0.0        192.168.2.1     255.255.0.0     UG       40 0          0 eth1
10.4.0.0        192.168.2.1     255.255.0.0     UG       40 0          0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U        40 0          0 lo
0.0.0.0         209.1.1.81      0.0.0.0         UG       40 0          0 eth0
+ _________________________
+ cat /proc/net/ipsec_tncfg
ipsec0 -> eth0 mtu=16260(1443) -> 1500
ipsec1 -> NULL mtu=0(0) -> 0
ipsec2 -> NULL mtu=0(0) -> 0
ipsec3 -> NULL mtu=0(0) -> 0
+ _________________________
+ cat /proc/net/pf_key
    sock   pid   socket     next     prev e n p sndbf    Flags     Type St
c8b55180  6536 c6049e8c        0        0 0 0 2 65535 00000000        3  1
+ _________________________
+ cd /proc/net
+ egrep '^' pf_key_registered pf_key_supported
pf_key_registered:satype   socket   pid       sk
pf_key_registered:     2 c6049e8c  6536 c8b55180
pf_key_registered:     3 c6049e8c  6536 c8b55180
pf_key_registered:     9 c6049e8c  6536 c8b55180
pf_key_registered:    10 c6049e8c  6536 c8b55180
pf_key_supported:satype exttype alg_id ivlen minbits maxbits
pf_key_supported:     2      14      3     0     160     160
pf_key_supported:     2      14      2     0     128     128
pf_key_supported:     3      15      3   128     168     168
pf_key_supported:     3      14      3     0     160     160
pf_key_supported:     3      14      2     0     128     128
pf_key_supported:     9      15      1     0      32      32
pf_key_supported:    10      15      2     0       1       1
+ _________________________
+ cd /proc/sys/net/ipsec
+ egrep '^' debug_ah debug_eroute debug_esp debug_ipcomp debug_netlink debug_pfkey debug_radij debug_rcv debug_spi debug_tunnel debug_verbose debug_xform icmp inbound_policy_check tos
debug_ah:-1
debug_eroute:-1
debug_esp:-1
debug_ipcomp:-1
debug_netlink:2147483647
debug_pfkey:-1
debug_radij:-1
debug_rcv:-1
debug_spi:-1
debug_tunnel:-1
debug_verbose:0
debug_xform:-1
icmp:0
inbound_policy_check:1
tos:1
+ _________________________
+ ipsec auto --status
000 interface ipsec0/eth0 209.1.1.86
000  
000 "sabat-win2k" instance: 10.1.0.0/16===209.1.1.86[O=companyname, CN=Webmaster]---209.1.1.81...
000 "sabat-win2k" instance: ...64.174.43.34[O=companyname, CN=Steve Abatangle]===192.168.2.11/32
000 "sabat-win2k" instance:   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "sabat-win2k" instance:   policy: RSASIG+ENCRYPT+TUNNEL+PFS; interface: eth0; erouted
000 "sabat-win2k" instance:   newest ISAKMP SA: #3; newest IPsec SA: #4; eroute owner: #4
000 "sabat-win2k": 10.1.0.0/16===209.1.1.86[O=companyname, CN=Webmaster]---209.1.1.81...
000 "sabat-win2k": ...%any[O=companyname, CN=Steve Abatangle]===192.168.2.11/32
000 "sabat-win2k":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "sabat-win2k":   policy: RSASIG+ENCRYPT+TUNNEL+PFS; interface: eth0; unrouted
000 "sabat-win2k":   newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
000 "smb-win2k": 10.1.0.0/16===209.1.1.86[O=companyname, CN=Webmaster]---209.1.1.81...
000 "smb-win2k": ...%any[O=companyname, CN=Steve Barrington]
000 "smb-win2k":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "smb-win2k":   policy: RSASIG+ENCRYPT+TUNNEL+PFS; interface: eth0; unrouted
000 "smb-win2k":   newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
000  
000 #4: "sabat-win2k":64.174.43.34 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 27918s; newest IPSEC; eroute owner
000 #4: "sabat-win2k":64.174.43.34 esp.b38ce7a8@64.174.43.34 esp.1fdedd1d@209.1.1.86 tun.1004@64.174.43.34 tun.1003@209.1.1.86
000 #3: "sabat-win2k":64.174.43.34 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 2477s; newest ISAKMP
000 #2: "sabat-win2k":64.174.43.34 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 139s
000 #2: "sabat-win2k":64.174.43.34 esp.ce9af7c1@64.174.43.34 esp.1fdedd1c@209.1.1.86 tun.1002@64.174.43.34 tun.1001@209.1.1.86
000 #1: "sabat-win2k":64.174.43.34 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 138s
+ _________________________
+ ifconfig -a
dummy0    Link encap:Ethernet  HWaddr 00:00:00:00:00:00  
          BROADCAST NOARP  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

eth0      Link encap:Ethernet  HWaddr 00:E0:81:01:8F:0F  
          inet addr:209.1.1.86  Bcast:209.1.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:17879 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5900 errors:0 dropped:0 overruns:0 carrier:0
          collisions:163 txqueuelen:100 
          RX bytes:3359455 (3.2 Mb)  TX bytes:821390 (802.1 Kb)
          Interrupt:20 

eth1      Link encap:Ethernet  HWaddr 00:E0:81:01:8F:10  
          inet addr:192.168.2.3  Bcast:192.168.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:29961 errors:0 dropped:0 overruns:0 frame:0
          TX packets:31648 errors:0 dropped:0 overruns:0 carrier:0
          collisions:5 txqueuelen:100 
          RX bytes:2361505 (2.2 Mb)  TX bytes:9781557 (9.3 Mb)
          Interrupt:21 Base address:0x2000 

ipsec0    Link encap:Ethernet  HWaddr 00:E0:81:01:8F:0F  
          inet addr:209.1.1.86  Mask:255.255.255.0
          UP RUNNING NOARP  MTU:16260  Metric:1
          RX packets:10392 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4788 errors:0 dropped:6 overruns:0 carrier:0
          collisions:0 txqueuelen:10 
          RX bytes:620356 (605.8 Kb)  TX bytes:704976 (688.4 Kb)

ipsec1    Link encap:IPIP Tunnel  HWaddr   
          NOARP  MTU:0  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

ipsec2    Link encap:IPIP Tunnel  HWaddr   
          NOARP  MTU:0  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

ipsec3    Link encap:IPIP Tunnel  HWaddr   
          NOARP  MTU:0  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:336 (336.0 b)  TX bytes:336 (336.0 b)

tunl0     Link encap:IPIP Tunnel  HWaddr   
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

+ _________________________
+ ipsec --directory
/usr/local/lib/ipsec
+ _________________________
+ hostname --fqdn
outside.vpn1.companyname.com
+ _________________________
+ hostname --ip-address
209.1.1.86 
+ _________________________
+ uptime
  7:25am  up 1 day, 12:07,  3 users,  load average: 0.00, 0.00, 0.00
+ _________________________
+ ipsec showdefaults
#dr: no default route
# no default route
# no default route
+ _________________________
+ ipsec _include /etc/ipsec.conf
+ ipsec _keycensor

#< /etc/ipsec.conf 1
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file

# More elaborate and more varied sample configurations can be found
# in FreeS/WAN's doc/examples file.

# basic configuration
config setup
	# THIS SETTING MUST BE CORRECT or almost nothing will work;
	# %defaultroute is okay for most simple cases.
	interfaces="ipsec0=eth0"
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	klipsdebug=all
	plutodebug=all
	# Use auto= parameters in conn descriptions to control startup actions.
	plutoload=%search
	# plutoload=
	plutostart=%search
	# plutostart=
	# Close down old connection when new one using same ID shows up.
	uniqueids=yes

# defaults for subsequent connection descriptions
conn %default
	# Parameters for manual-keying testing (DON'T USE OPERATIONALLY).
	# Note:  only one test connection at a time can use these parameters!
	# spi=0x200
	# esp=3des-md5-96
	# espenckey=[sums to ee78...]
	# espauthkey=[sums to e715...]
	# RSA authentication with keys from DNS.
	# leftrsasigkey=%dns
	# rightrsasigkey=%dns
	#
	# How persistent to be in (re)keying negotiations (0 means very).
	keyingtries=3
	authby=rsasig
	# keylife=2m
	# ikelifetime=20m

conn sabat-win2k
	authby=rsasig
        left=209.1.1.86
	# leftupdown=/usr/local/lib/ipsec/_sabat_updown
	leftcert=servercert.pem
        leftnexthop=209.1.1.81
	leftsubnet=10.1.0.0/16
        right=%any
	rightcert=w2kcert.pem
	rightsubnet=192.168.2.11/32
	pfs=yes
	compress=no
        auto=add

conn smb-win2k
	authby=rsasig
        left=209.1.1.86
	leftupdown=/usr/local/lib/ipsec/_sabat_updown
	leftcert=servercert.pem
        leftnexthop=209.1.1.81
	leftsubnet=10.1.0.0/16
        right=%any
	rightcert=smb-cert.pem
        rightnexthop=
	# rightsubnet=192.168.2.12/32
	pfs=yes
	compress=no
        auto=add


+ _________________________
+ ipsec _include /etc/ipsec.secrets
+ ipsec _secretcensor

#< /etc/ipsec.secrets 1
# This file holds shared secrets or RSA private keys for inter-Pluto
# authentication.  See ipsec_pluto(8) manpage, and HTML documentation.

# Shared secret (an arbitrary character string, which should be both long
# and hard to guess, enclosed in quotes) for a pair of negotiating hosts.
# Must be same on both; generate on one and copy to the other.

# sample /etc/ipsec.secrets file for 10.1.0.1
# 10.1.0.1 10.2.0.1: PSK "[sums to 376b...]"

# 209.1.1.86 10.1.178.2: PSK "[sums to e0b5...]"

#Dublin-Iowa
209.1.1.86 63.88.139.5: PSK "[sums to f9e6...]"

# RSA private key for this host, authenticating it to any other host
# which knows the public part.  Put ONLY the "[sums to 2f1c...]" part into connection
# descriptions on the other host(s); it need not be kept secret, and can
# be extracted conveniently with "[sums to ef67...]".
: RSA	{
	Modulus: [...]
	PublicExponent: [...]
	PrivateExponent: [...]
	Prime1: [...]
	Prime2: [...]
	Exponent1: [...]
	Exponent2: [...]
	Coefficient: [...]
	}
# do not change the indenting of that "[sums to 7d9d...]"
+ _________________________
+ ls -l /usr/local/lib/ipsec
total 2508
-rwxr-xr-x    1 root     root        11387 Jun 21 19:15 _confread
-rwxr-xr-x    1 root     root         2163 Jun 21 19:15 _include
-rwxr-xr-x    1 root     root         1383 Jun 21 19:15 _keycensor
-rwxr-xr-x    1 root     root         3271 Jun 21 19:15 _plutoload
-rwxr-xr-x    1 root     root         3404 Jun 21 19:15 _plutorun
-rwxr-xr-x    1 root     root         6709 Jun 21 19:15 _realsetup
-rwx------    1 root     root         5447 Jun 22 20:03 _sabat_updown
-rwxr-xr-x    1 root     root         1904 Jun 21 19:15 _secretcensor
-rwxr-xr-x    1 root     root         5716 Jun 21 19:15 _startklips
-rwxr-xr-x    1 root     root         4722 Jun 21 19:15 _updown
-rwxr-xr-x    1 root     root         9994 Jun 21 19:15 auto
-rwxr-xr-x    1 root     root         4670 Jun 21 19:15 barf
-rwx------    1 root     root         1373 Jun 20 10:19 companyname_conn_setup
drwx------    2 root     root         4096 Jun 22 20:02 companyname_data
-rwxr-xr-x    1 root     root       214416 Jun 21 19:15 eroute
-rwx------    1 root     root       530332 Jun 17 20:37 fswcert
-rwxr-xr-x    1 root     root         2846 Jun 21 19:15 ipsec
-rwxr-xr-x    1 root     root       150166 Jun 21 19:15 klipsdebug
-rwxr-xr-x    1 root     root         2437 Jun 21 19:15 look
-rwxr-xr-x    1 root     root        16172 Jun 21 19:15 manual
-rwxr-xr-x    1 root     root       775501 Jun 21 19:15 pluto
-rwxr-xr-x    1 root     root        39651 Jun 21 19:15 ranbits
-rwxr-xr-x    1 root     root        56764 Jun 21 19:15 rsasigkey
lrwxrwxrwx    1 root     root           22 Jun 21 19:15 setup -> /etc/rc.d/init.d/ipsec
-rwxr-xr-x    1 root     root         1041 Jun 21 19:15 showdefaults
-rwxr-xr-x    1 root     root         3055 Jun 21 19:15 showhostkey
-rwxr-xr-x    1 root     root       230212 Jun 21 19:15 spi
-rwxr-xr-x    1 root     root       191578 Jun 21 19:15 spigrp
-rwxr-xr-x    1 root     root        68330 Jun 21 19:15 tncfg
-rwxr-xr-x    1 root     root       127940 Jun 21 19:15 whack
+ _________________________
++ ls /usr/local/lib/ipsec
++ egrep updown
+ cat /usr/local/lib/ipsec/_sabat_updown
#! /bin/sh
# default updown script
# Copyright (C) 2000, 2001  D. Hugh Redelmeier, Henry Spencer
# 
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version.  See .
# 
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
# or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
# for more details.
#
# RCSID $Id: _updown,v 1.14 2001/04/07 22:42:54 henry Exp $

(echo `/bin/date` && echo $PLUTO_VERB) >> /tmp/SABAT_RAN

# CAUTION:  Installing a new version of FreeS/WAN will install a new
# copy of this script, wiping out any custom changes you make.  If
# you need changes, make a copy of this under another name, and customize
# that, and use the (left/right)updown parameters in ipsec.conf to make
# FreeS/WAN use yours instead of this default one.



# check interface version
case "$PLUTO_VERSION" in
1.[0])	# Older Pluto?!?  Play it safe, script may be using new features.
	echo "$0: obsolete interface version \`$PLUTO_VERSION'," >&2
	echo "$0: 	called by obsolete Pluto?" >&2
	exit 2
	;;
1.*)	;;
*)	echo "$0: unknown interface version \`$PLUTO_VERSION'" >&2
	exit 2
	;;
esac

# check parameter(s)
case "$*" in
'')	;;
ipfwadm)	# caused by (left/right)firewall=yes; for default script only
	;;
*)	echo "$0: unknown parameter \`$1'" >&2
	exit 2
	;;
esac

# utility functions for route manipulation
# Meddling with this stuff should not be necessary and requires great care.
uproute() {
	doroute add
}
downroute() {
	doroute del
}
doroute() {
	parms="-net $PLUTO_PEER_CLIENT_NET netmask $PLUTO_PEER_CLIENT_MASK"
	parms2="dev $PLUTO_INTERFACE gw $PLUTO_NEXT_HOP"
	case "$PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK" in
	"0.0.0.0/0.0.0.0")
		# horrible kludge for obscure routing bug with opportunistic
		route $1 -net 0.0.0.0 netmask 128.0.0.0 $parms2 &&
			route $1 -net 128.0.0.0 netmask 128.0.0.0 $parms2
		;;
	*)	route $1 $parms $parms2	;;
	esac
	st=$?
	if test $st -ne 0
	then
		# route has already given its own cryptic message
		echo "$0: \`route $1 $parms' failed" >&2
	fi
	return $st
}



# the big choice
case "$PLUTO_VERB:$1" in
prepare-host:*|prepare-client:*)
	# delete possibly-existing route (preliminary to adding a route)
	case "$PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK" in
	"0.0.0.0/0.0.0.0")
		# horrible kludge for obscure routing bug with opportunistic
		parms1="-net 0.0.0.0 netmask 128.0.0.0"
		parms2="-net 128.0.0.0 netmask 128.0.0.0"
		oops="`route del $parms1 2>&1 ; route del $parms2 2>&1`"
		;;
	*)
		parms="-net $PLUTO_PEER_CLIENT_NET netmask $PLUTO_PEER_CLIENT_MASK"
		oops="`route del $parms 2>&1`"
		;;
	esac
	status="$?"
	if test " $oops" = " " -a " $status" != " 0"
	then
		oops="silent error, exit status $status"
	fi
	case "$oops" in
	'SIOCDELRT: No such process'*)
		# This is what route (currently -- not documented!) gives
		# for "could not find such a route".
		oops=
		status=0
		;;
	esac
	if test " $oops" != " " -o " $status" != " 0"
	then
		echo "$0: \`route del $parms' failed ($oops)" >&2
	fi
	exit $status
	;;
route-host:*|route-client:*)
	# connection to me or my client subnet being routed
	uproute

	;;
unroute-host:*|unroute-client:*)
	# connection to me or my client subnet being unrouted
	downroute

	;;
up-host:*)
	# connection to me coming up
	# If you are doing a custom version, firewall commands go here.
	;;
down-host:*)
	# connection to me going down
	# If you are doing a custom version, firewall commands go here.
	;;
up-client:)
	# connection to my client subnet coming up
	# If you are doing a custom version, firewall commands go here.

	/usr/local/lib/ipsec/companyname_conn_setup up $PLUTO_PEER $PLUTO_CONNECTION

	;;
down-client:)
	# connection to my client subnet going down
	# If you are doing a custom version, firewall commands go here.

	/usr/local/lib/ipsec/companyname_conn_setup down $PLUTO_PEER $PLUTO_CONNECTION

	;;
up-client:ipfwadm)
	# connection to client subnet, with (left/right)firewall=yes, coming up
	# This is used only by the default updown script, not by your custom
	# ones, so do not mess with it; see CAUTION comment up at top.
	# ipfwadm -F -i accept -b -S $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \
	#	-D $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK
	iptables -I FORWARD 1 -t filter -d $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK -j ACCEPT
	iptables -I FORWARD 1 -t filter -d $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK -s $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK -j ACCEPT

	;;
down-client:ipfwadm)
	# connection to client subnet, with (left/right)firewall=yes, going down
	# This is used only by the default updown script, not by your custom
	# ones, so do not mess with it; see CAUTION comment up at top.
	# ipfwadm -F -d accept -b -S $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \
	#	-D $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK
	iptables -D FORWARD -t filter -s $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK -d $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK -j ACCEPT
        iptables -D FORWARD -t filter -d $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK -s $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK -j ACCEPT

	;;
*)	echo "$0: unknown verb \`$PLUTO_VERB' or parameter \`$1'" >&2
	exit 1
	;;
esac
+ cat /usr/local/lib/ipsec/_updown
#! /bin/sh
# default updown script
# Copyright (C) 2000, 2001  D. Hugh Redelmeier, Henry Spencer
# 
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version.  See .
# 
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
# or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
# for more details.
#
# RCSID $Id: _updown,v 1.14 2001/04/07 22:42:54 henry Exp $



# CAUTION:  Installing a new version of FreeS/WAN will install a new
# copy of this script, wiping out any custom changes you make.  If
# you need changes, make a copy of this under another name, and customize
# that, and use the (left/right)updown parameters in ipsec.conf to make
# FreeS/WAN use yours instead of this default one.



# check interface version
case "$PLUTO_VERSION" in
1.[0])	# Older Pluto?!?  Play it safe, script may be using new features.
	echo "$0: obsolete interface version \`$PLUTO_VERSION'," >&2
	echo "$0: 	called by obsolete Pluto?" >&2
	exit 2
	;;
1.*)	;;
*)	echo "$0: unknown interface version \`$PLUTO_VERSION'" >&2
	exit 2
	;;
esac

# check parameter(s)
case "$*" in
'')	;;
ipfwadm)	# caused by (left/right)firewall=yes; for default script only
	;;
*)	echo "$0: unknown parameter \`$1'" >&2
	exit 2
	;;
esac

# utility functions for route manipulation
# Meddling with this stuff should not be necessary and requires great care.
uproute() {
	doroute add
}
downroute() {
	doroute del
}
doroute() {
	parms="-net $PLUTO_PEER_CLIENT_NET netmask $PLUTO_PEER_CLIENT_MASK"
	parms2="dev $PLUTO_INTERFACE gw $PLUTO_NEXT_HOP"
	case "$PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK" in
	"0.0.0.0/0.0.0.0")
		# horrible kludge for obscure routing bug with opportunistic
		route $1 -net 0.0.0.0 netmask 128.0.0.0 $parms2 &&
			route $1 -net 128.0.0.0 netmask 128.0.0.0 $parms2
		;;
	*)	route $1 $parms $parms2	;;
	esac
	st=$?
	if test $st -ne 0
	then
		# route has already given its own cryptic message
		echo "$0: \`route $1 $parms' failed" >&2
	fi
	return $st
}



# the big choice
case "$PLUTO_VERB:$1" in
prepare-host:*|prepare-client:*)
	# delete possibly-existing route (preliminary to adding a route)
	case "$PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK" in
	"0.0.0.0/0.0.0.0")
		# horrible kludge for obscure routing bug with opportunistic
		parms1="-net 0.0.0.0 netmask 128.0.0.0"
		parms2="-net 128.0.0.0 netmask 128.0.0.0"
		oops="`route del $parms1 2>&1 ; route del $parms2 2>&1`"
		;;
	*)
		parms="-net $PLUTO_PEER_CLIENT_NET netmask $PLUTO_PEER_CLIENT_MASK"
		oops="`route del $parms 2>&1`"
		;;
	esac
	status="$?"
	if test " $oops" = " " -a " $status" != " 0"
	then
		oops="silent error, exit status $status"
	fi
	case "$oops" in
	'SIOCDELRT: No such process'*)
		# This is what route (currently -- not documented!) gives
		# for "could not find such a route".
		oops=
		status=0
		;;
	esac
	if test " $oops" != " " -o " $status" != " 0"
	then
		echo "$0: \`route del $parms' failed ($oops)" >&2
	fi
	exit $status
	;;
route-host:*|route-client:*)
	# connection to me or my client subnet being routed
	uproute
	;;
unroute-host:*|unroute-client:*)
	# connection to me or my client subnet being unrouted
	downroute
	;;
up-host:*)
	# connection to me coming up
	# If you are doing a custom version, firewall commands go here.
	;;
down-host:*)
	# connection to me going down
	# If you are doing a custom version, firewall commands go here.
	;;
up-client:)
	# connection to my client subnet coming up
	# If you are doing a custom version, firewall commands go here.
	;;
down-client:)
	# connection to my client subnet going down
	# If you are doing a custom version, firewall commands go here.
	;;
up-client:ipfwadm)
	# connection to client subnet, with (left/right)firewall=yes, coming up
	# This is used only by the default updown script, not by your custom
	# ones, so do not mess with it; see CAUTION comment up at top.
	ipfwadm -F -i accept -b -S $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \
		-D $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK
	;;
down-client:ipfwadm)
	# connection to client subnet, with (left/right)firewall=yes, going down
	# This is used only by the default updown script, not by your custom
	# ones, so do not mess with it; see CAUTION comment up at top.
	ipfwadm -F -d accept -b -S $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \
		-D $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK
	;;
*)	echo "$0: unknown verb \`$PLUTO_VERB' or parameter \`$1'" >&2
	exit 1
	;;
esac
+ _________________________
+ cat /proc/net/dev
Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
    lo:     336       4    0    0    0     0          0         0      336       4    0    0    0     0       0          0
  eth0: 3359455   17879    0    0    0     0          0         0   821390    5900    0    0    0   166       0          0
  eth1: 2361505   29961    0    0    0     0          0         0  9781557   31648    0    0    0     5       0          0
dummy0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
 tunl0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
ipsec0:  620356   10392    0    0    0     0          0         0   704976    4788    0    6    0     0       0          0
ipsec1:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
ipsec2:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
ipsec3:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
+ _________________________
+ cat /proc/net/route
Iface	Destination	Gateway 	Flags	RefCnt	Use	Metric	Mask		MTU	Window	IRTT                                                       
ipsec0	0B02A8C0	510101D1	0007	0	0	0	FFFFFFFF	40	0	0                                                                            
eth1	403252CF	0102A8C0	0003	0	0	0	C0FFFFFF	40	0	0                                                                              
eth1	0002A8C0	00000000	0001	0	0	0	00FFFFFF	40	0	0                                                                              
eth0	000101D1	00000000	0001	0	0	0	00FFFFFF	40	0	0                                                                              
ipsec0	000101D1	00000000	0001	0	0	0	00FFFFFF	40	0	0                                                                            
eth1	0000010A	0102A8C0	0003	0	0	0	0000FFFF	40	0	0                                                                              
eth1	0000040A	0102A8C0	0003	0	0	0	0000FFFF	40	0	0                                                                              
lo	0000007F	00000000	0001	0	0	0	000000FF	40	0	0                                                                                
eth0	00000000	510101D1	0003	0	0	0	00000000	40	0	0                                                                              
+ _________________________
+ cat /proc/sys/net/ipv4/ip_forward
1
+ _________________________
+ uname -a
Linux vpn1 2.4.5 #3 SMP Thu Jun 21 19:09:59 PDT 2001 i686 unknown
+ _________________________
+ test -r /etc/redhat-release
+ cat /etc/redhat-release
Linux Mandrake release 8.0 (Traktopel) for i586
+ _________________________
+ cat /proc/net/ipsec_version
FreeS/WAN version: 1.91
+ _________________________
+ ipchains -L -v -n
/usr/local/lib/ipsec/barf: ipchains: command not found
+ _________________________
+ ipfwadm -F -l -n -e
/usr/local/lib/ipsec/barf: ipfwadm: command not found
+ _________________________
+ ipfwadm -I -l -n -e
/usr/local/lib/ipsec/barf: ipfwadm: command not found
+ _________________________
+ ipfwadm -O -l -n -e
/usr/local/lib/ipsec/barf: ipfwadm: command not found
+ _________________________
+ ipchains -M -L -v -n
/usr/local/lib/ipsec/barf: ipchains: command not found
+ _________________________
+ ipfwadm -M -l -n -e
/usr/local/lib/ipsec/barf: ipfwadm: command not found
+ _________________________
+ cat /proc/modules
cat: /proc/modules: No such file or directory
+ _________________________
+ cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  261599232 257429504  4169728        0  3874816 235974656
Swap: 813670400        0 813670400
MemTotal:       255468 kB
MemFree:          4072 kB
MemShared:           0 kB
Buffers:          3784 kB
Cached:         230444 kB
Active:          99024 kB
Inact_dirty:     48236 kB
Inact_clean:     86968 kB
Inact_target:       56 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:       255468 kB
LowFree:          4072 kB
SwapTotal:      794600 kB
SwapFree:       794600 kB
+ _________________________
+ ls -l '/dev/ipsec*'
ls: /dev/ipsec*: No such file or directory
+ _________________________
+ ls -l /proc/net/ipsec_eroute /proc/net/ipsec_klipsdebug /proc/net/ipsec_spi /proc/net/ipsec_spigrp /proc/net/ipsec_tncfg /proc/net/ipsec_version
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_eroute
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_klipsdebug
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_spi
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_spigrp
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_tncfg
-r--r--r--    1 root     root            0 Jun 23 07:25 /proc/net/ipsec_version
+ _________________________
+ test -f /usr/src/linux/.config
+ egrep 'IP|NETLINK' /usr/src/linux/.config
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
CONFIG_SYSVIPC=y
CONFIG_NETLINK=y
CONFIG_RTNETLINK=y
# CONFIG_NETLINK_DEV is not set
# CONFIG_IP_MULTICAST is not set
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_RTNETLINK=y
CONFIG_NETLINK=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_FWMARK=y
CONFIG_IP_ROUTE_NAT=y
CONFIG_IP_ROUTE_MULTIPATH=y
CONFIG_IP_ROUTE_TOS=y
CONFIG_IP_ROUTE_VERBOSE=y
# CONFIG_IP_ROUTE_LARGE_TABLES is not set
# CONFIG_IP_PNP is not set
CONFIG_NET_IPIP=y
# CONFIG_NET_IPGRE is not set
#   IP: Netfilter Configuration
CONFIG_IP_NF_CONNTRACK=y
CONFIG_IP_NF_FTP=y
# CONFIG_IP_NF_QUEUE is not set
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_MATCH_LIMIT=y
CONFIG_IP_NF_MATCH_MAC=y
CONFIG_IP_NF_MATCH_MARK=y
CONFIG_IP_NF_MATCH_MULTIPORT=y
CONFIG_IP_NF_MATCH_TOS=y
CONFIG_IP_NF_MATCH_TCPMSS=y
CONFIG_IP_NF_MATCH_STATE=y
CONFIG_IP_NF_MATCH_UNCLEAN=y
# CONFIG_IP_NF_MATCH_OWNER is not set
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
# CONFIG_IP_NF_TARGET_MIRROR is not set
CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_NAT_NEEDED=y
CONFIG_IP_NF_TARGET_MASQUERADE=y
CONFIG_IP_NF_TARGET_REDIRECT=y
CONFIG_IP_NF_NAT_FTP=y
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_TARGET_TOS=y
CONFIG_IP_NF_TARGET_MARK=y
CONFIG_IP_NF_TARGET_LOG=y
CONFIG_IP_NF_TARGET_TCPMSS=y
# CONFIG_IPV6 is not set
# CONFIG_IPX is not set
CONFIG_IPSEC=y
CONFIG_IPSEC_IPIP=y
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AUTH_HMAC_MD5=y
CONFIG_IPSEC_AUTH_HMAC_SHA1=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ENC_3DES=y
CONFIG_IPSEC_IPCOMP=y
CONFIG_IPSEC_DEBUG=y
# CONFIG_IDEDMA_PCI_WIP is not set
# CONFIG_IDE_CHIPSETS is not set
# CONFIG_SCSI_IPS is not set
# CONFIG_TULIP is not set
# CONFIG_HIPPI is not set
# CONFIG_SLIP is not set
+ _________________________
+ cat /etc/syslog.conf
# Various entry
auth,authpriv.*							/var/log/auth.log
*.*;auth,authpriv.none						-/var/log/syslog
user.*								-/var/log/user.log

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none					-/var/log/messages

# The authpriv file has restricted access.
authpriv.*							/var/log/secure

# Mail logging
mail.=debug;mail.=info;mail.=notice				-/var/log/mail/info
mail.=warn							-/var/log/mail/warnings
mail.err							-/var/log/mail/errors

# Cron logging
cron.=debug;cron.=info;cron.=notice				-/var/log/cron/info
cron.=warn							-/var/log/cron/warnings
cron.err							-/var/log/cron/errors

# Kernel logging
kern.=debug;kern.=info;kern.=notice				-/var/log/kernel/info
kern.=warn							-/var/log/kernel/warnings
kern.err							/var/log/kernel/errors

# Lpr logging
lpr.=debug;lpr.=info;lpr.=notice				-/var/log/lpr/info
lpr.=warn							-/var/log/lpr/warnings
lpr.err								-/var/log/lpr/errors

# News logging
news.=debug;news.=info;news.=notice				-/var/log/news/info
news.=warn							-/var/log/news/warnings
news.err							-/var/log/news/errors

# Daemons logging
daemon.=debug;daemon.=info;daemon.=notice			-/var/log/daemons/info
daemon.=warn							-/var/log/daemons/warnings
daemon.err							-/var/log/daemons/errors


# Everybody gets emergency messages
*.emerg								*

# Save mail and news errors of level err and higher in a
# special file.
uucp,news.crit							-/var/log/spooler

# Save boot messages also to boot.log
local7.*							-/var/log/boot.log
# Mandrake-Security : if you remove this comment, remove the next line too.
*.* /dev/tty12
+ _________________________
+ test -f /var/log/kern.debug
+ _________________________
+ egrep -i 'ipsec|klips|pluto'
++ egrep -n 'Starting FreeS.WAN' /var/log/messages
+ cat
++ sed -n '$s/:.*//p'
+ sed -n '719043,$p' /var/log/messages
Jun 23 07:07:12 outside ipsec_setup: Starting FreeS/WAN IPsec 1.91...
Jun 23 07:07:12 outside ipsec_setup: KLIPS debug `all'
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_x_debug_process: set
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 16 with msg_parser c0208430.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_x_msg_debug_parse: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: sock=ce8598cc sk=cf7a4e00
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: sk(cf7a4e00)->(&cf7a4e54)receive_queue.{next=cf7a4e54,prev=cf7a4e54}.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: destroyed.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_remove_socket: removing sock=ce8598cc
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock=c6049e8c type:3 state:1 flags:0 protocol:2
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=c6049ea8.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_insert_socket: sk=c8b547c0
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: Socket sock=c6049e8c sk=c8b547c0 initialised.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=15, errno=0, satype=0(UNKNOWN), len=4, res=0, seq=1, pid=6511.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c6065e30.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15, errno=0, satype=0(UNKNOWN), len=4, res=0, seq=1, pid=6511.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: remain=2, ext_type=1, ext_len=2.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00003, required=00000001.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=2.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cefa6630 with parser c0217000.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00000000 replay=0 state=0 auth=0 encrypt=0 flags=4.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00003, seen=00000003, required=00000001.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cefa6630 with processor c0203b80.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 15 with msg_parser c0207ff0.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_x_delflow_parse: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_x_delflow_parse: CLEARFLOW flag set, calling cleareroutes.
Jun 23 07:07:12 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:07:12 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:07:12 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: sock=c6049e8c sk=c8b547c0
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: sk(c8b547c0)->(&c8b54814)receive_queue.{next=c8b54814,prev=c8b54814}.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: destroyed.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_remove_socket: removing sock=c6049e8c
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock=ce85914c type:3 state:1 flags:0 protocol:2
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ce859168.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_insert_socket: sk=ce91cae0
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=ce85914c
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: Socket sock=ce85914c sk=ce91cae0 initialised.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=9, errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=6513.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c6065e30.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=9, errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=6513.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: remain=0, ext_type=0, ext_len=12846.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 9 with msg_parser c02073f0.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_flush_parse: flushing type 0 SAs
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_tdbcleanup: cleaning up proto=0.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_upmsg: allocating 16 bytes...
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_upmsg: ...allocated at cf6b1a80.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_flush_parse: sending up flush reply message for satype=0(UNKNOWN) to socket=ce85914c succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: sock=ce85914c sk=ce91cae0
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_remove_socket: succeeded.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: sk(ce91cae0)->(&ce91cb34)receive_queue.{next=cf6b1a80,prev=cf6b1a80}.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: skb=cf6b1a80 freed.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_destroy_socket: destroyed.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_remove_socket: removing sock=ce85914c
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_release: succeeded.
Jun 23 07:07:12 outside ipsec_setup: KLIPS ipsec0 on eth0 209.1.1.86/255.255.255.0 broadcast 209.1.1.255 
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35312 for dev=ipsec0
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_attatch...
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_tunnel_attach: physical device eth0 being attached has HW address:  0:e0:81:01:8f:0f
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_tunnel_open: dev = ipsec0, prv->dev = eth0
Jun 23 07:07:12 outside kernel: klips_debug:ipsec_device_event: NETDEV_UP dev=ipsec0
Jun 23 07:07:12 outside ipsec_setup: ...FreeS/WAN IPsec started
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock=c6049e8c type:3 state:1 flags:0 protocol:2
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=c6049ea8.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_insert_socket: sk=c8b55180
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_create: Socket sock=c6049e8c sk=c8b55180 initialised.
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:12 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=2(AH), len=2, res=0, seq=1, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=2(AH), len=2, res=0, seq=1, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=0, ext_type=0, ext_len=0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 7 with msg_parser c0206e70.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: SATYPE=02(AH) successfully registered by KMd (pid=6536).
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: pfkey_supported_list[2]=c14497e0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c14497e0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c1449800
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth=cefa66a0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=2(AH) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth=cefa66a8
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=2(AH) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=00000000.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=cefa66e0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=cec96e60 allocated 40 bytes, &(extensions[0])=c629fda0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=cefa6580 to=cec96e70
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00004001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=2(AH), len=5, res=0, seq=1, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=3, ext_type=14, ext_len=3.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=14 remain=3.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 14 cec96e70 with parser c0217aa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: Extension 14 parsed.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00004001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: allocating 40 bytes...
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: ...allocated at ced6e320.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: sending up register reply message for satype=2(AH) to socket=c6049e8c succeeded.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=0, ext_type=0, ext_len=0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 7 with msg_parser c0206e70.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: SATYPE=03(ESP) successfully registered by KMd (pid=6536).
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: pfkey_supported_list[3]=c1449780
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c1449780
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c14497a0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c14497c0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt=ce84f460
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=3(ESP) exttype=15 id=3 ivlen=128 minbits=168 maxbits=168.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth=cefa66e0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=3(ESP) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding auth=cefa66e8
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=3(ESP) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=00000000.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=c7842de0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=cec96e60 allocated 56 bytes, &(extensions[0])=c629fda0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=c7842ec0 to=cec96e70
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=c7842fa0 to=cec96e88
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=7, res=0, seq=2, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=5, ext_type=14, ext_len=3.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=14 remain=5.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 14 cec96e70 with parser c0217aa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: Extension 14 parsed.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=15 remain=2.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 15 cec96e88 with parser c0217aa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: Extension 15 parsed.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: allocating 56 bytes...
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: ...allocated at ced6b980.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: sending up register reply message for satype=3(ESP) to socket=c6049e8c succeeded.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=0, ext_type=0, ext_len=0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 7 with msg_parser c0206e70.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: SATYPE=10(COMP) successfully registered by KMd (pid=6536).
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: pfkey_supported_list[10]=c1449760
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c1449760
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt=c7842ec0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=10(COMP) exttype=15 id=2 ivlen=0 minbits=1 maxbits=1.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=00000000.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=c7842de0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=ce84f340 allocated 32 bytes, &(extensions[0])=c629fda0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=c7ed4fa0 to=ce84f350
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=4, res=0, seq=3, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=2, ext_type=15, ext_len=2.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=15 remain=2.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 15 ce84f350 with parser c0217aa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: Extension 15 parsed.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: allocating 32 bytes...
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: ...allocated at ced84200.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: sending up register reply message for satype=10(COMP) to socket=c6049e8c succeeded.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50800.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=0, ext_type=0, ext_len=0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 7 with msg_parser c0206e70.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: .
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_list_insert_socket: socketp=c6049e8c
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: SATYPE=09(IPIP) successfully registered by KMd (pid=6536).
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: pfkey_supported_list[9]=c1449740
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: checking supported=c1449740
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt alg.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: adding encrypt=ce84f340
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: found satype=9(IPIP) exttype=15 id=1 ivlen=0 minbits=32 maxbits=32.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=00000000.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd6c pfkey_ext=c629fda0 *pfkey_ext=ce84fc00.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=ce84fc40 allocated 32 bytes, &(extensions[0])=c629fda0
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=ce84fc20 to=ce84fc50
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=4, res=0, seq=4, pid=6536.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: remain=2, ext_type=15, ext_len=2.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=15 remain=2.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 15 ce84fc50 with parser c0217aa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: Extension 15 parsed.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: allocating 32 bytes...
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_upmsg: ...allocated at ced6eaa0.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_register_parse: sending up register reply message for satype=9(IPIP) to socket=c6049e8c succeeded.
Jun 23 07:07:13 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=3(ESP), len=17, res=0, seq=5, pid=6536.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50600.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_interp: satype 3 lookups to proto=50.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3, errno=0, satype=3(ESP), len=17, res=0, seq=5, pid=6536.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: satype 3(ESP) conversion to proto gives 50 for msg_type 3.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: remain=15, ext_type=1, ext_len=2.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, required=00000063.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=15.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf55a570 with parser c0217000.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=1fdedd1c replay=64 state=1 auth=2 encrypt=3 flags=0.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=13.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cf55a580 with parser c0217210.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=10.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf55a598 with parser c0217210.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=8 remain=7.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 8 cf55a5b0 with parser c0217450.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_key_parse:
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_key_parse: success, found len=3 exttype=8 bits=128 reserved=0.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: Extension 8 parsed.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=9 remain=4.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 9 cf55a5c8 with parser c0217450.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_key_parse:
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_key_parse: success, found len=4 exttype=9 bits=192 reserved=0.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: Extension 9 parsed.
Jun 23 07:07:23 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, seen=00000363, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cf55a570 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 5 cf55a580 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 6 cf55a598 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 8 cf55a5b0 with processor c0204490.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 9 cf55a5c8 with processor c0204490.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 3 with msg_parser c0206070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: .
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: no entries in tdb table fore for satype=3(ESP) to socket=c6049e8c succeeded.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=10, res=0, seq=6, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50c00.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=10, res=0, seq=6, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=8, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=8.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf5ee750 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001001 replay=0 state=1 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cf5ee760 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf5ee778 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, seen=00000063, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cf5ee750 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 5 cf5ee760 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 6 cf5ee778 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 3 with msg_parser c0206070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: .
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=142 of SA:tun0x1001@209.1.1.86 requested.
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: no entries in tdb table for hash=142 of SA:tun0x1001@209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: existing Tunnel Descriptor Block not found (this is good) for SAtun0x1001@209.1.1.86, in-bound, allocating.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_tdb_init: (pfkey defined) called for SA:tun0x1001@209.1.1.86
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_tdb_init: calling init routine of IPIP
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_tdb_init: (pfkey defined) IPIP tdb set for 64.174.43.34->209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd48 pfkey_ext=c629fd70 *pfkey_ext=00000000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd48 pfkey_ext=c629fd70 *pfkey_ext=ce84fc00.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_build: spi=00001001 replay=0 sa_state=1 auth=0 encrypt=0 flags=1
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: successful for SA: tun0x1001@209.1.1.86
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=cf5eeec0 allocated 80 bytes, &(extensions[0])=c629fd70
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ce84fc20 to=cf5eeed0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ce84fca0 to=cf5eeee0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ce84fcc0 to=cf5eeef8
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=00001c7b, seen=00000063, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=10, res=0, seq=6, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=8, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001c7b, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=8.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf5eeed0 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001001 replay=0 state=1 auth=0 encrypt=0 flags=1.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cf5eeee0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf5eeef8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001c7b, seen=00000063, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: allocating 80 bytes...
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: ...allocated at cf5f5b40.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: sending up add reply message for satype=9(IPIP) to socket=c6049e8c succeeded.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=13, res=0, seq=7, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=cea50000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=13, res=0, seq=7, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=11, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf5eeb50 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001001 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=9.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf5eeb60 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=18 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 18 cf5eeb78 with parser c0217ce0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 18 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=19 remain=5.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 19 cf5eeb80 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=19 spi=1fdedd1c replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 19 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=20 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 20 cf5eeb90 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 20 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cf5eeb50 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 6 cf5eeb60 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 18 cf5eeb78 with processor c0204870.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_process: protocol==50 decoded from satype==3(ESP).
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 19 cf5eeb80 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: tdb struct already allocated
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 20 cf5eeb90 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found 2nd dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: tdb struct already allocated
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 13 with msg_parser c0207580.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_grpsa_parse: .
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=142 of SA:tun0x1001@209.1.1.86 requested.
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fd10 pfkey_ext=c629fda0 *pfkey_ext=00000000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fd10 pfkey_ext=c629fda0 *pfkey_ext=ce84fc20.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_build: spi=00001001 replay=0 sa_state=0 auth=0 encrypt=0 flags=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_build:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_build: spi=1fdedd1c replay=0 sa_state=0 auth=0 encrypt=0 flags=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=20 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=ceafa0e0 allocated 104 bytes, &(extensions[0])=c629fda0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ce84fc00 to=ceafa0f0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ce84fce0 to=ceafa100
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 8 bytes from extensions[18]=ce84fd00 to=ceafa118
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[19]=ce84fd20 to=ceafa120
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[20]=ce84fd40 to=ceafa130
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=001c0043, seen=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=13, res=0, seq=7, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=11, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 ceafa0f0 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001001 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=9.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 ceafa100 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=18 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 18 ceafa118 with parser c0217ce0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 18 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=19 remain=5.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 19 ceafa120 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=19 spi=1fdedd1c replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 19 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=20 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 20 ceafa130 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 20 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: allocating 104 bytes...
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: ...allocated at cf6a6c00.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=c6049e8c succeeded.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=3(ESP), len=17, res=0, seq=8, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=ce1cc200.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: satype 3 lookups to proto=50.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3, errno=0, satype=3(ESP), len=17, res=0, seq=8, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 3(ESP) conversion to proto gives 50 for msg_type 3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=15, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=15.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cef86bb0 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=ce9af7c1 replay=64 state=1 auth=2 encrypt=3 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=13.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cef86bc0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=10.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cef86bd8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=8 remain=7.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 8 cef86bf0 with parser c0217450.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_parse: success, found len=3 exttype=8 bits=128 reserved=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 8 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=9 remain=4.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 9 cef86c08 with parser c0217450.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_parse: success, found len=4 exttype=9 bits=192 reserved=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 9 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=00001ffb, seen=00000363, required=00000063.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cef86bb0 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 5 cef86bc0 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 6 cef86bd8 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 8 cef86bf0 with processor c0204490.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 9 cef86c08 with processor c0204490.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_key_process: success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 3 with msg_parser c0206070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_add_parse: .
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=55 of SA:esp0xce9af7c1@64.174.43.34 requested.
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: no entries in tdb table main=11, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 ced864f0 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=9.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 ced86500 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=18 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 18 ced86518 with parser c0217ce0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_satype_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 18 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=19 remain=5.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 19 ced86520 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=19 spi=ce9af7c1 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 19 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=20 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 20 ced86530 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 20 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: allocating 104 bytes...
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: ...allocated at cf5f1200.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=c6049e8c succeeded.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sendmsg: msg sent for parsing.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=22, res=0, seq=11, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_tdb: allocated tdb struct=c629fe30.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: allocated extr->tdb=ce1cca00.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=22, res=0, seq=11, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=20, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00063, required=01e00043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=20.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf55ab70 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=18.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cf55ab80 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=15.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf55ab98 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=21 remain=12.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 21 cf55abb0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=10.1.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 21 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=22 remain=9.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 22 cf55abc8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=192.168.2.11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 22 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=23 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 23 cf55abe0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=255.255.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 23 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=24 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 24 cf55abf8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=255.255.255.255.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 24 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00063, seen=01e00063, required=01e00043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 1 cf55ab70 with processor c0203b80.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_process: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 5 cf55ab80 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 6 cf55ab98 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: tdb_said.dst set to 64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 21 cf55abb0 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 10.1.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src flow address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=c629fe38.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: extr->eroute set to 10.1.0.0/0->0.0.0.0/0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 22 cf55abc8 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.2.11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst flow address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: extr->eroute set to 10.1.0.0/0->192.168.2.11/0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 23 cf55abe0 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found src mask address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: extr->eroute set to 10.1.0.0/16->192.168.2.11/0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: processing ext 24 cf55abf8 with processor c0204070.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.255.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: found dst mask address.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: extr->eroute set to 10.1.0.0/16->192.168.2.11/32
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_process: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_interp: parsing message type 14 with msg_parser c0207ae0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: .
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 10.1.0.0/16->192.168.2.11/32
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_makeroute: attempting to insert eroute for 10.1.0.0/16->192.168.2.11/32, SA: tun0x1002@64.174.43.34, PID:6536
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_makeroute: succeeded, I think...
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=c629fc70 pfkey_ext=c629fd20 *pfkey_ext=00000000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=c629fc70 pfkey_ext=c629fd20 *pfkey_ext=ce84fde0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_build: spi=00001002 replay=0 sa_state=0 auth=0 encrypt=0 flags=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=10.1.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=192.168.2.11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=255.255.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address family AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: found address=255.255.255.255.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_build: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build: error=0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_safe_build:success.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: pfkey_msg=cf55a460 allocated 176 bytes, &(extensions[0])=c629fd20
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ce84fdc0 to=cf55a470
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ce84fda0 to=cf55a480
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ce84fd80 to=cf55a498
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=ce84fd20 to=cf55a4b0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=ce84fd40 to=cf55a4c8
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=ce84fe00 to=cf55a4e0
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=ce84fe20 to=cf55a4f8
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_build: extensions permitted=01e00063, seen=01e00063, required=01e00043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=22, res=0, seq=11, pid=6536.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: remain=20, ext_type=1, ext_len=2.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00063, required=01e00043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=1 remain=20.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 1 cf55a470 with parser c0217000.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_sa_parse: successfully found len=2 exttype=1 spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 1 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=5 remain=18.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 5 cf55a480 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=209.1.1.86.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 5 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=6 remain=15.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 6 cf55a498 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=64.174.43.34.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 6 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=21 remain=12.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 21 cf55a4b0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=10.1.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 21 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=22 remain=9.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 22 cf55a4c8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=192.168.2.11.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 22 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=23 remain=6.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 23 cf55a4e0 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=255.255.0.0.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 23 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: parsing ext type=24 remain=3.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: About to parse extension 24 cf55a4f8 with parser c0217210.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse:
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address family=2, AF_INET.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: found address=255.255.255.255.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_address_parse: successful.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: Extension 24 parsed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_msg_parse: extensions permitted=01e00063, seen=01e00063, required=01e00043.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: allocating 176 bytes...
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_upmsg: ...allocated at ced6e500.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=c6049e8c succeeded.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_x_addflow_parse: extr->tdb cleaned up and freed.
Jun 23 07:07:24 outside kernel: klips_debug:pfkey_recvmsg: sock=c6049e8c sk=c8b55180 msg=c629ff54 size=4096.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:1 frag_off:0 ttl:120 proto:50 chk:1076 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=1 (iv)=0x10c54ba9cf65917b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:24 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:1 frag_off:0 ttl:120 proto:4 chk:1154 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15412 frag_off:0 ttl:128 proto:1 chk:12690 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:24 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:2 frag_off:0 ttl:120 proto:50 chk:1075 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=2 (iv)=0x0547031e0a83c344 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:25 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:2 frag_off:0 ttl:120 proto:4 chk:1153 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15423 frag_off:0 ttl:128 proto:1 chk:12679 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:25 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:3 frag_off:0 ttl:120 proto:50 chk:1074 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=3 (iv)=0xae9aa16bfab46662 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:26 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:3 frag_off:0 ttl:120 proto:4 chk:1152 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15424 frag_off:0 ttl:128 proto:1 chk:12678 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:26 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:4 frag_off:0 ttl:120 proto:50 chk:1073 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=4 (iv)=0xe6147f5d0b9874cb iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:27 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:4 frag_off:0 ttl:120 proto:4 chk:1151 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15425 frag_off:0 ttl:128 proto:1 chk:12677 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_neigh_setup:
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22892 DF frag_off:0 ttl:251 proto:1 chk:22873 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1500 physmtu:1500 tothr:36 tottr:16 mtudiff:52 ippkttotlen:60
Jun 23 07:07:27 outside kernel: klips_info:ipsec_tunnel_start_xmit: dev ipsec0 mtu of 1500 decreased by 57 to 1443
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22892 DF frag_off:0 ttl:251 proto:1 chk:22873 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55015 frag_off:0 ttl:64 proto:4 chk:26011 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55015 frag_off:0 ttl:64 proto:50 chk:25933 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:27 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55015 frag_off:0 ttl:64 proto:50 chk:25933 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:5 frag_off:0 ttl:120 proto:50 chk:1072 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=5 (iv)=0xf5c207f5b0b826f9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:28 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:5 frag_off:0 ttl:120 proto:4 chk:1150 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15426 frag_off:0 ttl:128 proto:1 chk:12676 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22893 DF frag_off:0 ttl:251 proto:1 chk:22872 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22893 DF frag_off:0 ttl:251 proto:1 chk:22872 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55016 frag_off:0 ttl:64 proto:4 chk:26010 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55016 frag_off:0 ttl:64 proto:50 chk:25932 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:28 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55016 frag_off:0 ttl:64 proto:50 chk:25932 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:6 frag_off:0 ttl:120 proto:50 chk:1071 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=6 (iv)=0x9534f359c1cb30e6 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:29 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:6 frag_off:0 ttl:120 proto:4 chk:1149 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15427 frag_off:0 ttl:128 proto:1 chk:12675 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22894 DF frag_off:0 ttl:251 proto:1 chk:22871 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22894 DF frag_off:0 ttl:251 proto:1 chk:22871 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55017 frag_off:0 ttl:64 proto:4 chk:26009 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55017 frag_off:0 ttl:64 proto:50 chk:25931 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:29 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55017 frag_off:0 ttl:64 proto:50 chk:25931 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:7 frag_off:0 ttl:120 proto:50 chk:1070 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=7 (iv)=0x3108937c7d0a3398 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:30 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:7 frag_off:0 ttl:120 proto:4 chk:1148 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15428 frag_off:0 ttl:128 proto:1 chk:12674 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22895 DF frag_off:0 ttl:251 proto:1 chk:22870 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22895 DF frag_off:0 ttl:251 proto:1 chk:22870 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55018 frag_off:0 ttl:64 proto:4 chk:26008 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55018 frag_off:0 ttl:64 proto:50 chk:25930 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:30 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55018 frag_off:0 ttl:64 proto:50 chk:25930 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:8 frag_off:0 ttl:120 proto:50 chk:1069 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=8 (iv)=0x61bd3bfe8360ddb5 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:31 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:8 frag_off:0 ttl:120 proto:4 chk:1147 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15429 frag_off:0 ttl:128 proto:1 chk:12673 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22896 DF frag_off:0 ttl:251 proto:1 chk:22869 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22896 DF frag_off:0 ttl:251 proto:1 chk:22869 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55019 frag_off:0 ttl:64 proto:4 chk:26007 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55019 frag_off:0 ttl:64 proto:50 chk:25929 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:31 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55019 frag_off:0 ttl:64 proto:50 chk:25929 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:9 frag_off:0 ttl:120 proto:50 chk:1068 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=9 (iv)=0xcfa8d28ba01f0842 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:32 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:9 frag_off:0 ttl:120 proto:4 chk:1146 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15430 frag_off:0 ttl:128 proto:1 chk:12672 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22897 DF frag_off:0 ttl:251 proto:1 chk:22868 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22897 DF frag_off:0 ttl:251 proto:1 chk:22868 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55020 frag_off:0 ttl:64 proto:4 chk:26006 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55020 frag_off:0 ttl:64 proto:50 chk:25928 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:32 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55020 frag_off:0 ttl:64 proto:50 chk:25928 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:10 frag_off:0 ttl:120 proto:50 chk:1067 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=10 (iv)=0x7dfdec9182646089 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:33 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:10 frag_off:0 ttl:120 proto:4 chk:1145 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15431 frag_off:0 ttl:128 proto:1 chk:12671 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22898 DF frag_off:0 ttl:251 proto:1 chk:22867 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22898 DF frag_off:0 ttl:251 proto:1 chk:22867 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55021 frag_off:0 ttl:64 proto:4 chk:26005 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55021 frag_off:0 ttl:64 proto:50 chk:25927 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:33 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55021 frag_off:0 ttl:64 proto:50 chk:25927 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:11 frag_off:0 ttl:120 proto:50 chk:1066 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=11 (iv)=0x6a55f86f6ec17f34 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:34 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:11 frag_off:0 ttl:120 proto:4 chk:1144 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15432 frag_off:0 ttl:128 proto:1 chk:12670 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22899 DF frag_off:0 ttl:251 proto:1 chk:22866 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22899 DF frag_off:0 ttl:251 proto:1 chk:22866 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55022 frag_off:0 ttl:64 proto:4 chk:26004 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55022 frag_off:0 ttl:64 proto:50 chk:25926 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:34 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55022 frag_off:0 ttl:64 proto:50 chk:25926 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:12 frag_off:0 ttl:120 proto:50 chk:1065 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=12 (iv)=0x467af7e76b50512c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:35 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:12 frag_off:0 ttl:120 proto:4 chk:1143 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15433 frag_off:0 ttl:128 proto:1 chk:12669 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22900 DF frag_off:0 ttl:251 proto:1 chk:22865 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22900 DF frag_off:0 ttl:251 proto:1 chk:22865 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55023 frag_off:0 ttl:64 proto:4 chk:26003 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55023 frag_off:0 ttl:64 proto:50 chk:25925 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:35 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55023 frag_off:0 ttl:64 proto:50 chk:25925 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:13 frag_off:0 ttl:120 proto:50 chk:1064 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=13 (iv)=0x5a143ac9c8e3da05 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:36 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:13 frag_off:0 ttl:120 proto:4 chk:1142 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15434 frag_off:0 ttl:128 proto:1 chk:12668 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22901 DF frag_off:0 ttl:251 proto:1 chk:22864 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22901 DF frag_off:0 ttl:251 proto:1 chk:22864 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55024 frag_off:0 ttl:64 proto:4 chk:26002 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55024 frag_off:0 ttl:64 proto:50 chk:25924 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:36 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55024 frag_off:0 ttl:64 proto:50 chk:25924 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:14 frag_off:0 ttl:120 proto:50 chk:1063 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=14 (iv)=0x43a1e3104666a592 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:37 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:14 frag_off:0 ttl:120 proto:4 chk:1141 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15435 frag_off:0 ttl:128 proto:1 chk:12667 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22902 DF frag_off:0 ttl:251 proto:1 chk:22863 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22902 DF frag_off:0 ttl:251 proto:1 chk:22863 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55025 frag_off:0 ttl:64 proto:4 chk:26001 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55025 frag_off:0 ttl:64 proto:50 chk:25923 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:37 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55025 frag_off:0 ttl:64 proto:50 chk:25923 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:15 frag_off:0 ttl:120 proto:50 chk:1062 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=15 (iv)=0x95b902e9537ef0dc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:38 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:15 frag_off:0 ttl:120 proto:4 chk:1140 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15436 frag_off:0 ttl:128 proto:1 chk:12666 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22903 DF frag_off:0 ttl:251 proto:1 chk:22862 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22903 DF frag_off:0 ttl:251 proto:1 chk:22862 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55026 frag_off:0 ttl:64 proto:4 chk:26000 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55026 frag_off:0 ttl:64 proto:50 chk:25922 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:38 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55026 frag_off:0 ttl:64 proto:50 chk:25922 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:16 frag_off:0 ttl:120 proto:50 chk:1061 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=16 (iv)=0xd797d2facbaaa416 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:39 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:16 frag_off:0 ttl:120 proto:4 chk:1139 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15437 frag_off:0 ttl:128 proto:1 chk:12665 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22904 DF frag_off:0 ttl:251 proto:1 chk:22861 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22904 DF frag_off:0 ttl:251 proto:1 chk:22861 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55027 frag_off:0 ttl:64 proto:4 chk:25999 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55027 frag_off:0 ttl:64 proto:50 chk:25921 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:39 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55027 frag_off:0 ttl:64 proto:50 chk:25921 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:17 frag_off:0 ttl:120 proto:50 chk:1060 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=17 (iv)=0x2d7a5c6d73dd0f95 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:40 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:17 frag_off:0 ttl:120 proto:4 chk:1138 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15443 frag_off:0 ttl:128 proto:1 chk:12659 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22905 DF frag_off:0 ttl:251 proto:1 chk:22860 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22905 DF frag_off:0 ttl:251 proto:1 chk:22860 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55028 frag_off:0 ttl:64 proto:4 chk:25998 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55028 frag_off:0 ttl:64 proto:50 chk:25920 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:40 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55028 frag_off:0 ttl:64 proto:50 chk:25920 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:18 frag_off:0 ttl:120 proto:50 chk:1059 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=18 (iv)=0x6da5dc231a95dbae iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:41 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:18 frag_off:0 ttl:120 proto:4 chk:1137 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15455 frag_off:0 ttl:128 proto:1 chk:12647 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22906 DF frag_off:0 ttl:251 proto:1 chk:22859 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22906 DF frag_off:0 ttl:251 proto:1 chk:22859 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55029 frag_off:0 ttl:64 proto:4 chk:25997 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55029 frag_off:0 ttl:64 proto:50 chk:25919 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:41 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55029 frag_off:0 ttl:64 proto:50 chk:25919 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:19 frag_off:0 ttl:120 proto:50 chk:1058 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=19 (iv)=0xff213f6a543465f3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:42 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:19 frag_off:0 ttl:120 proto:4 chk:1136 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15457 frag_off:0 ttl:128 proto:1 chk:12645 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22907 DF frag_off:0 ttl:251 proto:1 chk:22858 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22907 DF frag_off:0 ttl:251 proto:1 chk:22858 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55030 frag_off:0 ttl:64 proto:4 chk:25996 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55030 frag_off:0 ttl:64 proto:50 chk:25918 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:42 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55030 frag_off:0 ttl:64 proto:50 chk:25918 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:20 frag_off:0 ttl:120 proto:50 chk:1057 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=20 (iv)=0x3c31c095968e213e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:43 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:20 frag_off:0 ttl:120 proto:4 chk:1135 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15458 frag_off:0 ttl:128 proto:1 chk:12644 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22908 DF frag_off:0 ttl:251 proto:1 chk:22857 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22908 DF frag_off:0 ttl:251 proto:1 chk:22857 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55031 frag_off:0 ttl:64 proto:4 chk:25995 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55031 frag_off:0 ttl:64 proto:50 chk:25917 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:43 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55031 frag_off:0 ttl:64 proto:50 chk:25917 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:21 frag_off:0 ttl:120 proto:50 chk:1056 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=21 (iv)=0xd8a3fd2e19e6a010 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:44 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:21 frag_off:0 ttl:120 proto:4 chk:1134 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15460 frag_off:0 ttl:128 proto:1 chk:12642 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22909 DF frag_off:0 ttl:251 proto:1 chk:22856 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22909 DF frag_off:0 ttl:251 proto:1 chk:22856 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55032 frag_off:0 ttl:64 proto:4 chk:25994 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55032 frag_off:0 ttl:64 proto:50 chk:25916 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:44 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55032 frag_off:0 ttl:64 proto:50 chk:25916 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:22 frag_off:0 ttl:120 proto:50 chk:1055 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=22 (iv)=0x05abe0b91c34637d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:45 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:22 frag_off:0 ttl:120 proto:4 chk:1133 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15461 frag_off:0 ttl:128 proto:1 chk:12641 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22910 DF frag_off:0 ttl:251 proto:1 chk:22855 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22910 DF frag_off:0 ttl:251 proto:1 chk:22855 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55033 frag_off:0 ttl:64 proto:4 chk:25993 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55033 frag_off:0 ttl:64 proto:50 chk:25915 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:45 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55033 frag_off:0 ttl:64 proto:50 chk:25915 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:23 frag_off:0 ttl:120 proto:50 chk:1054 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=23 (iv)=0xad61de5f743bf88f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:46 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:23 frag_off:0 ttl:120 proto:4 chk:1132 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15462 frag_off:0 ttl:128 proto:1 chk:12640 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22911 DF frag_off:0 ttl:251 proto:1 chk:22854 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22911 DF frag_off:0 ttl:251 proto:1 chk:22854 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55034 frag_off:0 ttl:64 proto:4 chk:25992 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55034 frag_off:0 ttl:64 proto:50 chk:25914 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:46 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55034 frag_off:0 ttl:64 proto:50 chk:25914 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:24 frag_off:0 ttl:120 proto:50 chk:1053 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=24 (iv)=0x5b7bd56581a4eee8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:47 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:24 frag_off:0 ttl:120 proto:4 chk:1131 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15463 frag_off:0 ttl:128 proto:1 chk:12639 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22912 DF frag_off:0 ttl:251 proto:1 chk:22853 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22912 DF frag_off:0 ttl:251 proto:1 chk:22853 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55035 frag_off:0 ttl:64 proto:4 chk:25991 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55035 frag_off:0 ttl:64 proto:50 chk:25913 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:47 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55035 frag_off:0 ttl:64 proto:50 chk:25913 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:25 frag_off:0 ttl:120 proto:50 chk:1052 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=25 (iv)=0x6c8e0a4905569ac7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:48 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:25 frag_off:0 ttl:120 proto:4 chk:1130 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15465 frag_off:0 ttl:128 proto:1 chk:12637 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22913 DF frag_off:0 ttl:251 proto:1 chk:22852 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22913 DF frag_off:0 ttl:251 proto:1 chk:22852 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55036 frag_off:0 ttl:64 proto:4 chk:25990 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55036 frag_off:0 ttl:64 proto:50 chk:25912 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:48 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55036 frag_off:0 ttl:64 proto:50 chk:25912 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:26 frag_off:0 ttl:120 proto:50 chk:1051 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=26 (iv)=0xde28c1456a477eb0 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:49 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:26 frag_off:0 ttl:120 proto:4 chk:1129 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15466 frag_off:0 ttl:128 proto:1 chk:12636 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22914 DF frag_off:0 ttl:251 proto:1 chk:22851 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22914 DF frag_off:0 ttl:251 proto:1 chk:22851 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55037 frag_off:0 ttl:64 proto:4 chk:25989 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55037 frag_off:0 ttl:64 proto:50 chk:25911 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:49 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55037 frag_off:0 ttl:64 proto:50 chk:25911 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:27 frag_off:0 ttl:120 proto:50 chk:1050 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=27 (iv)=0xdc79539e70569316 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:50 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:27 frag_off:0 ttl:120 proto:4 chk:1128 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15467 frag_off:0 ttl:128 proto:1 chk:12635 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22915 DF frag_off:0 ttl:251 proto:1 chk:22850 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22915 DF frag_off:0 ttl:251 proto:1 chk:22850 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55038 frag_off:0 ttl:64 proto:4 chk:25988 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55038 frag_off:0 ttl:64 proto:50 chk:25910 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:50 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55038 frag_off:0 ttl:64 proto:50 chk:25910 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:28 frag_off:0 ttl:120 proto:50 chk:1049 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=28 (iv)=0x64eecc2bcd8a208a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:51 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:28 frag_off:0 ttl:120 proto:4 chk:1127 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15472 frag_off:0 ttl:128 proto:1 chk:12630 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22916 DF frag_off:0 ttl:251 proto:1 chk:22849 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22916 DF frag_off:0 ttl:251 proto:1 chk:22849 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55039 frag_off:0 ttl:64 proto:4 chk:25987 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55039 frag_off:0 ttl:64 proto:50 chk:25909 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:51 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55039 frag_off:0 ttl:64 proto:50 chk:25909 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:29 frag_off:0 ttl:120 proto:50 chk:1048 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=29 (iv)=0x1bb70a35a7622354 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:52 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:29 frag_off:0 ttl:120 proto:4 chk:1126 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15498 frag_off:0 ttl:128 proto:1 chk:12604 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22917 DF frag_off:0 ttl:251 proto:1 chk:22848 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22917 DF frag_off:0 ttl:251 proto:1 chk:22848 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55040 frag_off:0 ttl:64 proto:4 chk:25986 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55040 frag_off:0 ttl:64 proto:50 chk:25908 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:52 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55040 frag_off:0 ttl:64 proto:50 chk:25908 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:30 frag_off:0 ttl:120 proto:50 chk:1047 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=30 (iv)=0x4a0bf2c46fda2700 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:53 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:30 frag_off:0 ttl:120 proto:4 chk:1125 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15512 frag_off:0 ttl:128 proto:1 chk:12590 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22918 DF frag_off:0 ttl:251 proto:1 chk:22847 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22918 DF frag_off:0 ttl:251 proto:1 chk:22847 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55041 frag_off:0 ttl:64 proto:4 chk:25985 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55041 frag_off:0 ttl:64 proto:50 chk:25907 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:53 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55041 frag_off:0 ttl:64 proto:50 chk:25907 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:31 frag_off:0 ttl:120 proto:50 chk:1046 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=31 (iv)=0x56ade2ea1d2c7723 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:54 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:31 frag_off:0 ttl:120 proto:4 chk:1124 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15514 frag_off:0 ttl:128 proto:1 chk:12588 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22919 DF frag_off:0 ttl:251 proto:1 chk:22846 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22919 DF frag_off:0 ttl:251 proto:1 chk:22846 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55042 frag_off:0 ttl:64 proto:4 chk:25984 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55042 frag_off:0 ttl:64 proto:50 chk:25906 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:54 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55042 frag_off:0 ttl:64 proto:50 chk:25906 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:32 frag_off:0 ttl:120 proto:50 chk:1045 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=32 (iv)=0xcef17961e2b4d72b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:55 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:32 frag_off:0 ttl:120 proto:4 chk:1123 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15536 frag_off:0 ttl:128 proto:1 chk:12566 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22920 DF frag_off:0 ttl:251 proto:1 chk:22845 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22920 DF frag_off:0 ttl:251 proto:1 chk:22845 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55043 frag_off:0 ttl:64 proto:4 chk:25983 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55043 frag_off:0 ttl:64 proto:50 chk:25905 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:55 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55043 frag_off:0 ttl:64 proto:50 chk:25905 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:33 frag_off:0 ttl:120 proto:50 chk:1044 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=33 (iv)=0x654ec503e7677318 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:56 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:33 frag_off:0 ttl:120 proto:4 chk:1122 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15570 frag_off:0 ttl:128 proto:1 chk:12532 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22921 DF frag_off:0 ttl:251 proto:1 chk:22844 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22921 DF frag_off:0 ttl:251 proto:1 chk:22844 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55044 frag_off:0 ttl:64 proto:4 chk:25982 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55044 frag_off:0 ttl:64 proto:50 chk:25904 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:56 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55044 frag_off:0 ttl:64 proto:50 chk:25904 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:34 frag_off:0 ttl:120 proto:50 chk:1043 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=34 (iv)=0x3cb66879bf271209 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:57 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:34 frag_off:0 ttl:120 proto:4 chk:1121 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15590 frag_off:0 ttl:128 proto:1 chk:12512 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22922 DF frag_off:0 ttl:251 proto:1 chk:22843 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22922 DF frag_off:0 ttl:251 proto:1 chk:22843 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55045 frag_off:0 ttl:64 proto:4 chk:25981 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55045 frag_off:0 ttl:64 proto:50 chk:25903 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:57 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55045 frag_off:0 ttl:64 proto:50 chk:25903 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:35 frag_off:0 ttl:120 proto:50 chk:1042 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=35 (iv)=0xd6b96ac196baf2fa iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:58 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:35 frag_off:0 ttl:120 proto:4 chk:1120 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15615 frag_off:0 ttl:128 proto:1 chk:12487 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22923 DF frag_off:0 ttl:251 proto:1 chk:22842 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22923 DF frag_off:0 ttl:251 proto:1 chk:22842 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55046 frag_off:0 ttl:64 proto:4 chk:25980 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55046 frag_off:0 ttl:64 proto:50 chk:25902 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:58 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55046 frag_off:0 ttl:64 proto:50 chk:25902 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:36 frag_off:0 ttl:120 proto:50 chk:1041 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=36 (iv)=0x1b81795bd2b56633 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:07:59 outside kernel: klips_debug:           00: 01 02
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:36 frag_off:0 ttl:120 proto:4 chk:1119 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15640 frag_off:0 ttl:128 proto:1 chk:12462 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22924 DF frag_off:0 ttl:251 proto:1 chk:22841 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:07:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22924 DF frag_off:0 ttl:251 proto:1 chk:22841 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55047 frag_off:0 ttl:64 proto:4 chk:25979 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55047 frag_off:0 ttl:64 proto:50 chk:25901 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:07:59 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:07:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:07:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55047 frag_off:0 ttl:64 proto:50 chk:25901 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:37 frag_off:0 ttl:120 proto:50 chk:1040 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=37 (iv)=0x0df746ea39e38fa7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:00 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:37 frag_off:0 ttl:120 proto:4 chk:1118 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15641 frag_off:0 ttl:128 proto:1 chk:12461 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22925 DF frag_off:0 ttl:251 proto:1 chk:22840 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22925 DF frag_off:0 ttl:251 proto:1 chk:22840 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55048 frag_off:0 ttl:64 proto:4 chk:25978 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55048 frag_off:0 ttl:64 proto:50 chk:25900 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:00 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55048 frag_off:0 ttl:64 proto:50 chk:25900 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:38 frag_off:0 ttl:120 proto:50 chk:1039 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=38 (iv)=0x60e1a10ea841cb74 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:01 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:38 frag_off:0 ttl:120 proto:4 chk:1117 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15645 frag_off:0 ttl:128 proto:1 chk:12457 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22926 DF frag_off:0 ttl:251 proto:1 chk:22839 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22926 DF frag_off:0 ttl:251 proto:1 chk:22839 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55049 frag_off:0 ttl:64 proto:4 chk:25977 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55049 frag_off:0 ttl:64 proto:50 chk:25899 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:01 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55049 frag_off:0 ttl:64 proto:50 chk:25899 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:39 frag_off:0 ttl:120 proto:50 chk:1038 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=39 (iv)=0x9cabd38a1bd543f5 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:02 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:39 frag_off:0 ttl:120 proto:4 chk:1116 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15649 frag_off:0 ttl:128 proto:1 chk:12453 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22927 DF frag_off:0 ttl:251 proto:1 chk:22838 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22927 DF frag_off:0 ttl:251 proto:1 chk:22838 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55050 frag_off:0 ttl:64 proto:4 chk:25976 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55050 frag_off:0 ttl:64 proto:50 chk:25898 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:02 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55050 frag_off:0 ttl:64 proto:50 chk:25898 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:40 frag_off:0 ttl:120 proto:50 chk:1037 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=40 (iv)=0x4088fcda9974373e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:03 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:40 frag_off:0 ttl:120 proto:4 chk:1115 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15666 frag_off:0 ttl:128 proto:1 chk:12436 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22928 DF frag_off:0 ttl:251 proto:1 chk:22837 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22928 DF frag_off:0 ttl:251 proto:1 chk:22837 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55051 frag_off:0 ttl:64 proto:4 chk:25975 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55051 frag_off:0 ttl:64 proto:50 chk:25897 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:03 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55051 frag_off:0 ttl:64 proto:50 chk:25897 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:41 frag_off:0 ttl:120 proto:50 chk:1036 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=41 (iv)=0xe4b37ac9c42d1fa9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:04 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:41 frag_off:0 ttl:120 proto:4 chk:1114 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15676 frag_off:0 ttl:128 proto:1 chk:12426 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22929 DF frag_off:0 ttl:251 proto:1 chk:22836 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22929 DF frag_off:0 ttl:251 proto:1 chk:22836 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55052 frag_off:0 ttl:64 proto:4 chk:25974 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55052 frag_off:0 ttl:64 proto:50 chk:25896 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:04 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55052 frag_off:0 ttl:64 proto:50 chk:25896 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:42 frag_off:0 ttl:120 proto:50 chk:1035 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=42 (iv)=0xc58c7bf1d3f30084 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:05 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:42 frag_off:0 ttl:120 proto:4 chk:1113 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15706 frag_off:0 ttl:128 proto:1 chk:12396 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22930 DF frag_off:0 ttl:251 proto:1 chk:22835 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22930 DF frag_off:0 ttl:251 proto:1 chk:22835 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55053 frag_off:0 ttl:64 proto:4 chk:25973 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55053 frag_off:0 ttl:64 proto:50 chk:25895 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:05 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55053 frag_off:0 ttl:64 proto:50 chk:25895 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:43 frag_off:0 ttl:120 proto:50 chk:1034 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=43 (iv)=0x7b80ccef65d17e41 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:06 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:43 frag_off:0 ttl:120 proto:4 chk:1112 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15732 frag_off:0 ttl:128 proto:1 chk:12370 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22931 DF frag_off:0 ttl:251 proto:1 chk:22834 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22931 DF frag_off:0 ttl:251 proto:1 chk:22834 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55054 frag_off:0 ttl:64 proto:4 chk:25972 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55054 frag_off:0 ttl:64 proto:50 chk:25894 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:06 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55054 frag_off:0 ttl:64 proto:50 chk:25894 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:44 frag_off:0 ttl:120 proto:50 chk:1033 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=44 (iv)=0x1597661924949cb7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:07 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:44 frag_off:0 ttl:120 proto:4 chk:1111 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15742 frag_off:0 ttl:128 proto:1 chk:12360 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22932 DF frag_off:0 ttl:251 proto:1 chk:22833 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22932 DF frag_off:0 ttl:251 proto:1 chk:22833 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55055 frag_off:0 ttl:64 proto:4 chk:25971 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55055 frag_off:0 ttl:64 proto:50 chk:25893 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:07 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55055 frag_off:0 ttl:64 proto:50 chk:25893 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:45 frag_off:0 ttl:120 proto:50 chk:1032 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=45 (iv)=0x987d4256b4cf2d03 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:08 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:45 frag_off:0 ttl:120 proto:4 chk:1110 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15744 frag_off:0 ttl:128 proto:1 chk:12358 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22933 DF frag_off:0 ttl:251 proto:1 chk:22832 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22933 DF frag_off:0 ttl:251 proto:1 chk:22832 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55056 frag_off:0 ttl:64 proto:4 chk:25970 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55056 frag_off:0 ttl:64 proto:50 chk:25892 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:08 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55056 frag_off:0 ttl:64 proto:50 chk:25892 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:46 frag_off:0 ttl:120 proto:50 chk:1031 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=46 (iv)=0x1265430982e45b31 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:09 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:46 frag_off:0 ttl:120 proto:4 chk:1109 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15757 frag_off:0 ttl:128 proto:1 chk:12345 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22934 DF frag_off:0 ttl:251 proto:1 chk:22831 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22934 DF frag_off:0 ttl:251 proto:1 chk:22831 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55057 frag_off:0 ttl:64 proto:4 chk:25969 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55057 frag_off:0 ttl:64 proto:50 chk:25891 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:09 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55057 frag_off:0 ttl:64 proto:50 chk:25891 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:47 frag_off:0 ttl:120 proto:50 chk:1030 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=47 (iv)=0x36e71e27a515c227 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:10 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:47 frag_off:0 ttl:120 proto:4 chk:1108 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15767 frag_off:0 ttl:128 proto:1 chk:12335 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22935 DF frag_off:0 ttl:251 proto:1 chk:22830 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22935 DF frag_off:0 ttl:251 proto:1 chk:22830 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55058 frag_off:0 ttl:64 proto:4 chk:25968 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55058 frag_off:0 ttl:64 proto:50 chk:25890 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:10 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55058 frag_off:0 ttl:64 proto:50 chk:25890 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:48 frag_off:0 ttl:120 proto:50 chk:1029 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=48 (iv)=0x606828833fca8b67 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:11 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:48 frag_off:0 ttl:120 proto:4 chk:1107 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15788 frag_off:0 ttl:128 proto:1 chk:12314 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22936 DF frag_off:0 ttl:251 proto:1 chk:22829 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22936 DF frag_off:0 ttl:251 proto:1 chk:22829 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55059 frag_off:0 ttl:64 proto:4 chk:25967 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55059 frag_off:0 ttl:64 proto:50 chk:25889 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:11 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55059 frag_off:0 ttl:64 proto:50 chk:25889 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:49 frag_off:0 ttl:120 proto:50 chk:1028 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=49 (iv)=0x3fcad46a057c783b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:12 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:49 frag_off:0 ttl:120 proto:4 chk:1106 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15824 frag_off:0 ttl:128 proto:1 chk:12278 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22937 DF frag_off:0 ttl:251 proto:1 chk:22828 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22937 DF frag_off:0 ttl:251 proto:1 chk:22828 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55060 frag_off:0 ttl:64 proto:4 chk:25966 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55060 frag_off:0 ttl:64 proto:50 chk:25888 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:12 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55060 frag_off:0 ttl:64 proto:50 chk:25888 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:50 frag_off:0 ttl:120 proto:50 chk:1027 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=50 (iv)=0xbc216f5205b0e171 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:13 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:50 frag_off:0 ttl:120 proto:4 chk:1105 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15855 frag_off:0 ttl:128 proto:1 chk:12247 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22938 DF frag_off:0 ttl:251 proto:1 chk:22827 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22938 DF frag_off:0 ttl:251 proto:1 chk:22827 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55061 frag_off:0 ttl:64 proto:4 chk:25965 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55061 frag_off:0 ttl:64 proto:50 chk:25887 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:13 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55061 frag_off:0 ttl:64 proto:50 chk:25887 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:51 frag_off:0 ttl:120 proto:50 chk:1026 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=51 (iv)=0x036a1c211164079d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:14 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:51 frag_off:0 ttl:120 proto:4 chk:1104 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15859 frag_off:0 ttl:128 proto:1 chk:12243 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22939 DF frag_off:0 ttl:251 proto:1 chk:22826 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22939 DF frag_off:0 ttl:251 proto:1 chk:22826 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55062 frag_off:0 ttl:64 proto:4 chk:25964 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55062 frag_off:0 ttl:64 proto:50 chk:25886 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:14 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55062 frag_off:0 ttl:64 proto:50 chk:25886 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:52 frag_off:0 ttl:120 proto:50 chk:1025 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=52 (iv)=0x6d30e0d8e5f187ff iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:15 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:52 frag_off:0 ttl:120 proto:4 chk:1103 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15863 frag_off:0 ttl:128 proto:1 chk:12239 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22940 DF frag_off:0 ttl:251 proto:1 chk:22825 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22940 DF frag_off:0 ttl:251 proto:1 chk:22825 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55063 frag_off:0 ttl:64 proto:4 chk:25963 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55063 frag_off:0 ttl:64 proto:50 chk:25885 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:15 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55063 frag_off:0 ttl:64 proto:50 chk:25885 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:53 frag_off:0 ttl:120 proto:50 chk:1024 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=53 (iv)=0xafaf1bfcb3210304 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:16 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:53 frag_off:0 ttl:120 proto:4 chk:1102 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15871 frag_off:0 ttl:128 proto:1 chk:12231 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22941 DF frag_off:0 ttl:251 proto:1 chk:22824 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22941 DF frag_off:0 ttl:251 proto:1 chk:22824 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55064 frag_off:0 ttl:64 proto:4 chk:25962 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55064 frag_off:0 ttl:64 proto:50 chk:25884 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:16 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55064 frag_off:0 ttl:64 proto:50 chk:25884 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:54 frag_off:0 ttl:120 proto:50 chk:1023 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=54 (iv)=0xba793a366d73472b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:17 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:54 frag_off:0 ttl:120 proto:4 chk:1101 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15875 frag_off:0 ttl:128 proto:1 chk:12227 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22942 DF frag_off:0 ttl:251 proto:1 chk:22823 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22942 DF frag_off:0 ttl:251 proto:1 chk:22823 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55065 frag_off:0 ttl:64 proto:4 chk:25961 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55065 frag_off:0 ttl:64 proto:50 chk:25883 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:17 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55065 frag_off:0 ttl:64 proto:50 chk:25883 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55 frag_off:0 ttl:120 proto:50 chk:1022 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=55 (iv)=0xfaa00cdd264db05d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:18 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55 frag_off:0 ttl:120 proto:4 chk:1100 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15909 frag_off:0 ttl:128 proto:1 chk:12193 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22943 DF frag_off:0 ttl:251 proto:1 chk:22822 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22943 DF frag_off:0 ttl:251 proto:1 chk:22822 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55066 frag_off:0 ttl:64 proto:4 chk:25960 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55066 frag_off:0 ttl:64 proto:50 chk:25882 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:18 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55066 frag_off:0 ttl:64 proto:50 chk:25882 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:56 frag_off:0 ttl:120 proto:50 chk:1021 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=56 (iv)=0x328a1a308da5a267 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:19 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:56 frag_off:0 ttl:120 proto:4 chk:1099 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15921 frag_off:0 ttl:128 proto:1 chk:12181 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22944 DF frag_off:0 ttl:251 proto:1 chk:22821 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22944 DF frag_off:0 ttl:251 proto:1 chk:22821 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55067 frag_off:0 ttl:64 proto:4 chk:25959 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55067 frag_off:0 ttl:64 proto:50 chk:25881 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:19 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55067 frag_off:0 ttl:64 proto:50 chk:25881 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:57 frag_off:0 ttl:120 proto:50 chk:1020 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=57 (iv)=0x9adffa0f6a5e7078 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:20 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:57 frag_off:0 ttl:120 proto:4 chk:1098 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15933 frag_off:0 ttl:128 proto:1 chk:12169 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22945 DF frag_off:0 ttl:251 proto:1 chk:22820 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22945 DF frag_off:0 ttl:251 proto:1 chk:22820 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55068 frag_off:0 ttl:64 proto:4 chk:25958 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55068 frag_off:0 ttl:64 proto:50 chk:25880 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:20 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55068 frag_off:0 ttl:64 proto:50 chk:25880 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:58 frag_off:0 ttl:120 proto:50 chk:1019 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=58 (iv)=0xd5ed4dd223e61f12 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:21 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:58 frag_off:0 ttl:120 proto:4 chk:1097 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15969 frag_off:0 ttl:128 proto:1 chk:12133 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22946 DF frag_off:0 ttl:251 proto:1 chk:22819 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22946 DF frag_off:0 ttl:251 proto:1 chk:22819 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55069 frag_off:0 ttl:64 proto:4 chk:25957 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55069 frag_off:0 ttl:64 proto:50 chk:25879 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:21 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55069 frag_off:0 ttl:64 proto:50 chk:25879 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:59 frag_off:0 ttl:120 proto:50 chk:1018 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=59 (iv)=0xc36c59bf8a299c09 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:22 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:59 frag_off:0 ttl:120 proto:4 chk:1096 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15994 frag_off:0 ttl:128 proto:1 chk:12108 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22947 DF frag_off:0 ttl:251 proto:1 chk:22818 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22947 DF frag_off:0 ttl:251 proto:1 chk:22818 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55070 frag_off:0 ttl:64 proto:4 chk:25956 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55070 frag_off:0 ttl:64 proto:50 chk:25878 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:22 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55070 frag_off:0 ttl:64 proto:50 chk:25878 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:60 frag_off:0 ttl:120 proto:50 chk:1017 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=60 (iv)=0x38145d887b7cf3bf iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:23 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:60 frag_off:0 ttl:120 proto:4 chk:1095 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15995 frag_off:0 ttl:128 proto:1 chk:12107 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22948 DF frag_off:0 ttl:251 proto:1 chk:22817 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22948 DF frag_off:0 ttl:251 proto:1 chk:22817 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55071 frag_off:0 ttl:64 proto:4 chk:25955 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55071 frag_off:0 ttl:64 proto:50 chk:25877 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:23 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55071 frag_off:0 ttl:64 proto:50 chk:25877 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:61 frag_off:0 ttl:120 proto:50 chk:1016 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=61 (iv)=0xd6648972a6e13e74 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:24 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:61 frag_off:0 ttl:120 proto:4 chk:1094 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15996 frag_off:0 ttl:128 proto:1 chk:12106 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22949 DF frag_off:0 ttl:251 proto:1 chk:22816 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22949 DF frag_off:0 ttl:251 proto:1 chk:22816 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55072 frag_off:0 ttl:64 proto:4 chk:25954 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55072 frag_off:0 ttl:64 proto:50 chk:25876 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:24 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55072 frag_off:0 ttl:64 proto:50 chk:25876 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:62 frag_off:0 ttl:120 proto:50 chk:1015 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=62 (iv)=0x48b39b9a1462bb86 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:25 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:62 frag_off:0 ttl:120 proto:4 chk:1093 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15997 frag_off:0 ttl:128 proto:1 chk:12105 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22950 DF frag_off:0 ttl:251 proto:1 chk:22815 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22950 DF frag_off:0 ttl:251 proto:1 chk:22815 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55073 frag_off:0 ttl:64 proto:4 chk:25953 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55073 frag_off:0 ttl:64 proto:50 chk:25875 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:25 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55073 frag_off:0 ttl:64 proto:50 chk:25875 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:63 frag_off:0 ttl:120 proto:50 chk:1014 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=63 (iv)=0xa5045d9f29909bf4 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:26 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:63 frag_off:0 ttl:120 proto:4 chk:1092 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15998 frag_off:0 ttl:128 proto:1 chk:12104 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22951 DF frag_off:0 ttl:251 proto:1 chk:22814 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22951 DF frag_off:0 ttl:251 proto:1 chk:22814 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55074 frag_off:0 ttl:64 proto:4 chk:25952 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55074 frag_off:0 ttl:64 proto:50 chk:25874 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:26 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55074 frag_off:0 ttl:64 proto:50 chk:25874 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:64 frag_off:0 ttl:120 proto:50 chk:1013 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=64 (iv)=0x1012c133b9ba672d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:27 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:64 frag_off:0 ttl:120 proto:4 chk:1091 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:15999 frag_off:0 ttl:128 proto:1 chk:12103 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22952 DF frag_off:0 ttl:251 proto:1 chk:22813 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22952 DF frag_off:0 ttl:251 proto:1 chk:22813 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55075 frag_off:0 ttl:64 proto:4 chk:25951 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55075 frag_off:0 ttl:64 proto:50 chk:25873 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:27 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55075 frag_off:0 ttl:64 proto:50 chk:25873 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:65 frag_off:0 ttl:120 proto:50 chk:1012 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=65 (iv)=0xda0f80099cbf83e2 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:28 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:65 frag_off:0 ttl:120 proto:4 chk:1090 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16004 frag_off:0 ttl:128 proto:1 chk:12098 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22953 DF frag_off:0 ttl:251 proto:1 chk:22812 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22953 DF frag_off:0 ttl:251 proto:1 chk:22812 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55076 frag_off:0 ttl:64 proto:4 chk:25950 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55076 frag_off:0 ttl:64 proto:50 chk:25872 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:28 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55076 frag_off:0 ttl:64 proto:50 chk:25872 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:66 frag_off:0 ttl:120 proto:50 chk:1011 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=66 (iv)=0x46d272a83afc5f3d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:29 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:66 frag_off:0 ttl:120 proto:4 chk:1089 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16015 frag_off:0 ttl:128 proto:1 chk:12087 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22954 DF frag_off:0 ttl:251 proto:1 chk:22811 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22954 DF frag_off:0 ttl:251 proto:1 chk:22811 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55077 frag_off:0 ttl:64 proto:4 chk:25949 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55077 frag_off:0 ttl:64 proto:50 chk:25871 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:29 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55077 frag_off:0 ttl:64 proto:50 chk:25871 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:67 frag_off:0 ttl:120 proto:50 chk:1010 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=67 (iv)=0xef68d9a81313d20c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:30 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:67 frag_off:0 ttl:120 proto:4 chk:1088 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16024 frag_off:0 ttl:128 proto:1 chk:12078 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22955 DF frag_off:0 ttl:251 proto:1 chk:22810 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22955 DF frag_off:0 ttl:251 proto:1 chk:22810 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55078 frag_off:0 ttl:64 proto:4 chk:25948 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55078 frag_off:0 ttl:64 proto:50 chk:25870 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:30 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55078 frag_off:0 ttl:64 proto:50 chk:25870 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:68 frag_off:0 ttl:120 proto:50 chk:1009 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=68 (iv)=0x02e17e35422a1307 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:31 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:68 frag_off:0 ttl:120 proto:4 chk:1087 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16030 frag_off:0 ttl:128 proto:1 chk:12072 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22956 DF frag_off:0 ttl:251 proto:1 chk:22809 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22956 DF frag_off:0 ttl:251 proto:1 chk:22809 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55079 frag_off:0 ttl:64 proto:4 chk:25947 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55079 frag_off:0 ttl:64 proto:50 chk:25869 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:31 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55079 frag_off:0 ttl:64 proto:50 chk:25869 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:69 frag_off:0 ttl:120 proto:50 chk:1008 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=69 (iv)=0x07ec089af3f8ed49 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:32 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:69 frag_off:0 ttl:120 proto:4 chk:1086 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16033 frag_off:0 ttl:128 proto:1 chk:12069 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22957 DF frag_off:0 ttl:251 proto:1 chk:22808 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22957 DF frag_off:0 ttl:251 proto:1 chk:22808 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55080 frag_off:0 ttl:64 proto:4 chk:25946 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55080 frag_off:0 ttl:64 proto:50 chk:25868 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:32 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55080 frag_off:0 ttl:64 proto:50 chk:25868 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:70 frag_off:0 ttl:120 proto:50 chk:1007 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=70 (iv)=0xd334eca46377409b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:33 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:70 frag_off:0 ttl:120 proto:4 chk:1085 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16035 frag_off:0 ttl:128 proto:1 chk:12067 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22958 DF frag_off:0 ttl:251 proto:1 chk:22807 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22958 DF frag_off:0 ttl:251 proto:1 chk:22807 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55081 frag_off:0 ttl:64 proto:4 chk:25945 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55081 frag_off:0 ttl:64 proto:50 chk:25867 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:33 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55081 frag_off:0 ttl:64 proto:50 chk:25867 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:71 frag_off:0 ttl:120 proto:50 chk:1006 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=71 (iv)=0xceec75e2723dda96 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:34 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:71 frag_off:0 ttl:120 proto:4 chk:1084 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16036 frag_off:0 ttl:128 proto:1 chk:12066 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22959 DF frag_off:0 ttl:251 proto:1 chk:22806 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22959 DF frag_off:0 ttl:251 proto:1 chk:22806 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55082 frag_off:0 ttl:64 proto:4 chk:25944 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55082 frag_off:0 ttl:64 proto:50 chk:25866 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:34 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55082 frag_off:0 ttl:64 proto:50 chk:25866 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:72 frag_off:0 ttl:120 proto:50 chk:1005 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=72 (iv)=0xdd037b084d298d87 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:35 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:72 frag_off:0 ttl:120 proto:4 chk:1083 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16037 frag_off:0 ttl:128 proto:1 chk:12065 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22960 DF frag_off:0 ttl:251 proto:1 chk:22805 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22960 DF frag_off:0 ttl:251 proto:1 chk:22805 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55083 frag_off:0 ttl:64 proto:4 chk:25943 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55083 frag_off:0 ttl:64 proto:50 chk:25865 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:35 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55083 frag_off:0 ttl:64 proto:50 chk:25865 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:73 frag_off:0 ttl:120 proto:50 chk:1004 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=73 (iv)=0xa684bcf04f095d9b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:36 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:73 frag_off:0 ttl:120 proto:4 chk:1082 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16038 frag_off:0 ttl:128 proto:1 chk:12064 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22961 DF frag_off:0 ttl:251 proto:1 chk:22804 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22961 DF frag_off:0 ttl:251 proto:1 chk:22804 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55084 frag_off:0 ttl:64 proto:4 chk:25942 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55084 frag_off:0 ttl:64 proto:50 chk:25864 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:36 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55084 frag_off:0 ttl:64 proto:50 chk:25864 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:74 frag_off:0 ttl:120 proto:50 chk:1003 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=74 (iv)=0xa2b20c2dcfc5b4c2 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:37 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:74 frag_off:0 ttl:120 proto:4 chk:1081 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16039 frag_off:0 ttl:128 proto:1 chk:12063 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22962 DF frag_off:0 ttl:251 proto:1 chk:22803 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22962 DF frag_off:0 ttl:251 proto:1 chk:22803 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55085 frag_off:0 ttl:64 proto:4 chk:25941 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55085 frag_off:0 ttl:64 proto:50 chk:25863 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:37 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55085 frag_off:0 ttl:64 proto:50 chk:25863 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:75 frag_off:0 ttl:120 proto:50 chk:1002 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=75 (iv)=0xdb4c1eafc48118b8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:38 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:75 frag_off:0 ttl:120 proto:4 chk:1080 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16040 frag_off:0 ttl:128 proto:1 chk:12062 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22963 DF frag_off:0 ttl:251 proto:1 chk:22802 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22963 DF frag_off:0 ttl:251 proto:1 chk:22802 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55086 frag_off:0 ttl:64 proto:4 chk:25940 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55086 frag_off:0 ttl:64 proto:50 chk:25862 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:38 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55086 frag_off:0 ttl:64 proto:50 chk:25862 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:76 frag_off:0 ttl:120 proto:50 chk:1001 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=76 (iv)=0x78247fe34ec087b8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:39 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:76 frag_off:0 ttl:120 proto:4 chk:1079 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16041 frag_off:0 ttl:128 proto:1 chk:12061 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22964 DF frag_off:0 ttl:251 proto:1 chk:22801 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22964 DF frag_off:0 ttl:251 proto:1 chk:22801 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55087 frag_off:0 ttl:64 proto:4 chk:25939 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55087 frag_off:0 ttl:64 proto:50 chk:25861 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:39 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55087 frag_off:0 ttl:64 proto:50 chk:25861 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:77 frag_off:0 ttl:120 proto:50 chk:1000 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=77 (iv)=0x27b111c1e4dfef09 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:40 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:77 frag_off:0 ttl:120 proto:4 chk:1078 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16042 frag_off:0 ttl:128 proto:1 chk:12060 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22965 DF frag_off:0 ttl:251 proto:1 chk:22800 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22965 DF frag_off:0 ttl:251 proto:1 chk:22800 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55088 frag_off:0 ttl:64 proto:4 chk:25938 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55088 frag_off:0 ttl:64 proto:50 chk:25860 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:40 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55088 frag_off:0 ttl:64 proto:50 chk:25860 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:78 frag_off:0 ttl:120 proto:50 chk:999 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=78 (iv)=0x67714ab40b2296ba iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:41 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:78 frag_off:0 ttl:120 proto:4 chk:1077 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16043 frag_off:0 ttl:128 proto:1 chk:12059 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22966 DF frag_off:0 ttl:251 proto:1 chk:22799 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22966 DF frag_off:0 ttl:251 proto:1 chk:22799 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55089 frag_off:0 ttl:64 proto:4 chk:25937 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55089 frag_off:0 ttl:64 proto:50 chk:25859 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:41 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55089 frag_off:0 ttl:64 proto:50 chk:25859 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:79 frag_off:0 ttl:120 proto:50 chk:998 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=79 (iv)=0x438f4cff5640949a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:42 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:79 frag_off:0 ttl:120 proto:4 chk:1076 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16044 frag_off:0 ttl:128 proto:1 chk:12058 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22967 DF frag_off:0 ttl:251 proto:1 chk:22798 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22967 DF frag_off:0 ttl:251 proto:1 chk:22798 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55090 frag_off:0 ttl:64 proto:4 chk:25936 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55090 frag_off:0 ttl:64 proto:50 chk:25858 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:42 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55090 frag_off:0 ttl:64 proto:50 chk:25858 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:80 frag_off:0 ttl:120 proto:50 chk:997 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=80 (iv)=0x6b1f1440dcddf65c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:43 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:80 frag_off:0 ttl:120 proto:4 chk:1075 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16045 frag_off:0 ttl:128 proto:1 chk:12057 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22968 DF frag_off:0 ttl:251 proto:1 chk:22797 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22968 DF frag_off:0 ttl:251 proto:1 chk:22797 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55091 frag_off:0 ttl:64 proto:4 chk:25935 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55091 frag_off:0 ttl:64 proto:50 chk:25857 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:43 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55091 frag_off:0 ttl:64 proto:50 chk:25857 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:81 frag_off:0 ttl:120 proto:50 chk:996 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=81 (iv)=0x8a372ad7e664acae iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:44 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:81 frag_off:0 ttl:120 proto:4 chk:1074 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16046 frag_off:0 ttl:128 proto:1 chk:12056 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22969 DF frag_off:0 ttl:251 proto:1 chk:22796 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22969 DF frag_off:0 ttl:251 proto:1 chk:22796 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55092 frag_off:0 ttl:64 proto:4 chk:25934 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55092 frag_off:0 ttl:64 proto:50 chk:25856 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:44 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55092 frag_off:0 ttl:64 proto:50 chk:25856 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:82 frag_off:0 ttl:120 proto:50 chk:995 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=82 (iv)=0xa5111bd82b1ba71c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:45 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:82 frag_off:0 ttl:120 proto:4 chk:1073 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16049 frag_off:0 ttl:128 proto:1 chk:12053 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22970 DF frag_off:0 ttl:251 proto:1 chk:22795 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22970 DF frag_off:0 ttl:251 proto:1 chk:22795 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55093 frag_off:0 ttl:64 proto:4 chk:25933 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55093 frag_off:0 ttl:64 proto:50 chk:25855 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:45 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55093 frag_off:0 ttl:64 proto:50 chk:25855 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:83 frag_off:0 ttl:120 proto:50 chk:994 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=83 (iv)=0x5729d47dab0ea2cd iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:46 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:83 frag_off:0 ttl:120 proto:4 chk:1072 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16050 frag_off:0 ttl:128 proto:1 chk:12052 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22971 DF frag_off:0 ttl:251 proto:1 chk:22794 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22971 DF frag_off:0 ttl:251 proto:1 chk:22794 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55094 frag_off:0 ttl:64 proto:4 chk:25932 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55094 frag_off:0 ttl:64 proto:50 chk:25854 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:46 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55094 frag_off:0 ttl:64 proto:50 chk:25854 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:84 frag_off:0 ttl:120 proto:50 chk:993 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=84 (iv)=0x49785f05e190aaf3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:47 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:84 frag_off:0 ttl:120 proto:4 chk:1071 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16051 frag_off:0 ttl:128 proto:1 chk:12051 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22972 DF frag_off:0 ttl:251 proto:1 chk:22793 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22972 DF frag_off:0 ttl:251 proto:1 chk:22793 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55095 frag_off:0 ttl:64 proto:4 chk:25931 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55095 frag_off:0 ttl:64 proto:50 chk:25853 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:47 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55095 frag_off:0 ttl:64 proto:50 chk:25853 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:85 frag_off:0 ttl:120 proto:50 chk:992 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=85 (iv)=0xbe83a0614dbd36d4 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:48 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:85 frag_off:0 ttl:120 proto:4 chk:1070 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16052 frag_off:0 ttl:128 proto:1 chk:12050 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22973 DF frag_off:0 ttl:251 proto:1 chk:22792 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22973 DF frag_off:0 ttl:251 proto:1 chk:22792 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55096 frag_off:0 ttl:64 proto:4 chk:25930 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55096 frag_off:0 ttl:64 proto:50 chk:25852 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:48 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55096 frag_off:0 ttl:64 proto:50 chk:25852 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:86 frag_off:0 ttl:120 proto:50 chk:991 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=86 (iv)=0x18ac07dd16eb895c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:49 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:86 frag_off:0 ttl:120 proto:4 chk:1069 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16053 frag_off:0 ttl:128 proto:1 chk:12049 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22974 DF frag_off:0 ttl:251 proto:1 chk:22791 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22974 DF frag_off:0 ttl:251 proto:1 chk:22791 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55097 frag_off:0 ttl:64 proto:4 chk:25929 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55097 frag_off:0 ttl:64 proto:50 chk:25851 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:49 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55097 frag_off:0 ttl:64 proto:50 chk:25851 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:87 frag_off:0 ttl:120 proto:50 chk:990 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=87 (iv)=0xbbd01e5bde0c4d01 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:50 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:87 frag_off:0 ttl:120 proto:4 chk:1068 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16054 frag_off:0 ttl:128 proto:1 chk:12048 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22975 DF frag_off:0 ttl:251 proto:1 chk:22790 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22975 DF frag_off:0 ttl:251 proto:1 chk:22790 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55098 frag_off:0 ttl:64 proto:4 chk:25928 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55098 frag_off:0 ttl:64 proto:50 chk:25850 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:50 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55098 frag_off:0 ttl:64 proto:50 chk:25850 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:88 frag_off:0 ttl:120 proto:50 chk:989 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=88 (iv)=0x4014f7967bdda35d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:51 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:88 frag_off:0 ttl:120 proto:4 chk:1067 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16055 frag_off:0 ttl:128 proto:1 chk:12047 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22976 DF frag_off:0 ttl:251 proto:1 chk:22789 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22976 DF frag_off:0 ttl:251 proto:1 chk:22789 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55099 frag_off:0 ttl:64 proto:4 chk:25927 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55099 frag_off:0 ttl:64 proto:50 chk:25849 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:51 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55099 frag_off:0 ttl:64 proto:50 chk:25849 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:89 frag_off:0 ttl:120 proto:50 chk:988 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=89 (iv)=0xbddf3a27ef449c75 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:52 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:89 frag_off:0 ttl:120 proto:4 chk:1066 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16056 frag_off:0 ttl:128 proto:1 chk:12046 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22977 DF frag_off:0 ttl:251 proto:1 chk:22788 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22977 DF frag_off:0 ttl:251 proto:1 chk:22788 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55100 frag_off:0 ttl:64 proto:4 chk:25926 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55100 frag_off:0 ttl:64 proto:50 chk:25848 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:52 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55100 frag_off:0 ttl:64 proto:50 chk:25848 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:90 frag_off:0 ttl:120 proto:50 chk:987 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=90 (iv)=0xd7ed3ec74b37f944 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:53 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:90 frag_off:0 ttl:120 proto:4 chk:1065 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16057 frag_off:0 ttl:128 proto:1 chk:12045 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22978 DF frag_off:0 ttl:251 proto:1 chk:22787 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22978 DF frag_off:0 ttl:251 proto:1 chk:22787 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55101 frag_off:0 ttl:64 proto:4 chk:25925 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55101 frag_off:0 ttl:64 proto:50 chk:25847 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:53 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55101 frag_off:0 ttl:64 proto:50 chk:25847 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:91 frag_off:0 ttl:120 proto:50 chk:986 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=91 (iv)=0x4fa11cf805328ebe iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:54 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:91 frag_off:0 ttl:120 proto:4 chk:1064 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16058 frag_off:0 ttl:128 proto:1 chk:12044 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22979 DF frag_off:0 ttl:251 proto:1 chk:22786 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22979 DF frag_off:0 ttl:251 proto:1 chk:22786 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55102 frag_off:0 ttl:64 proto:4 chk:25924 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55102 frag_off:0 ttl:64 proto:50 chk:25846 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:54 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55102 frag_off:0 ttl:64 proto:50 chk:25846 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:92 frag_off:0 ttl:120 proto:50 chk:985 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=92 (iv)=0xe432cd45840e60d0 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:55 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:92 frag_off:0 ttl:120 proto:4 chk:1063 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16059 frag_off:0 ttl:128 proto:1 chk:12043 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22980 DF frag_off:0 ttl:251 proto:1 chk:22785 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22980 DF frag_off:0 ttl:251 proto:1 chk:22785 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55103 frag_off:0 ttl:64 proto:4 chk:25923 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55103 frag_off:0 ttl:64 proto:50 chk:25845 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:55 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55103 frag_off:0 ttl:64 proto:50 chk:25845 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:93 frag_off:0 ttl:120 proto:50 chk:984 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=93 (iv)=0x5b21ebb420deef5e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:56 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: trimming to 80.Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:93 frag_off:0 ttl:120 proto:4 chk:1062 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16060 frag_off:0 ttl:128 proto:1 chk:12042 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22981 DF frag_off:0 ttl:251 proto:1 chk:22784 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22981 DF frag_off:0 ttl:251 proto:1 chk:22784 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55104 frag_off:0 ttl:64 proto:4 chk:25922 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55104 frag_off:0 ttl:64 proto:50 chk:25844 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:56 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55104 frag_off:0 ttl:64 proto:50 chk:25844 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:94 frag_off:0 ttl:120 proto:50 chk:983 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=94 (iv)=0x701eec899a42d024 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:57 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:94 frag_off:0 ttl:120 proto:4 chk:1061 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16061 frag_off:0 ttl:128 proto:1 chk:12041 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22982 DF frag_off:0 ttl:251 proto:1 chk:22783 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22982 DF frag_off:0 ttl:251 proto:1 chk:22783 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55105 frag_off:0 ttl:64 proto:4 chk:25921 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55105 frag_off:0 ttl:64 proto:50 chk:25843 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:57 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55105 frag_off:0 ttl:64 proto:50 chk:25843 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:95 frag_off:0 ttl:120 proto:50 chk:982 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=95 (iv)=0xf0ca0751e620d33f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:58 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:95 frag_off:0 ttl:120 proto:4 chk:1060 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16064 frag_off:0 ttl:128 proto:1 chk:12038 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22983 DF frag_off:0 ttl:251 proto:1 chk:22782 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22983 DF frag_off:0 ttl:251 proto:1 chk:22782 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55106 frag_off:0 ttl:64 proto:4 chk:25920 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55106 frag_off:0 ttl:64 proto:50 chk:25842 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:58 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55106 frag_off:0 ttl:64 proto:50 chk:25842 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:96 frag_off:0 ttl:120 proto:50 chk:981 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=96 (iv)=0x7a8590874b21ac4c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:08:59 outside kernel: klips_debug:           00: 01 02
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:96 frag_off:0 ttl:120 proto:4 chk:1059 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16069 frag_off:0 ttl:128 proto:1 chk:12033 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22984 DF frag_off:0 ttl:251 proto:1 chk:22781 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:08:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22984 DF frag_off:0 ttl:251 proto:1 chk:22781 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55107 frag_off:0 ttl:64 proto:4 chk:25919 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55107 frag_off:0 ttl:64 proto:50 chk:25841 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:08:59 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:08:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:08:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55107 frag_off:0 ttl:64 proto:50 chk:25841 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:97 frag_off:0 ttl:120 proto:50 chk:980 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=97 (iv)=0xcdf7c53e935e2177 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:00 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:97 frag_off:0 ttl:120 proto:4 chk:1058 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16072 frag_off:0 ttl:128 proto:1 chk:12030 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22985 DF frag_off:0 ttl:251 proto:1 chk:22780 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22985 DF frag_off:0 ttl:251 proto:1 chk:22780 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55108 frag_off:0 ttl:64 proto:4 chk:25918 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55108 frag_off:0 ttl:64 proto:50 chk:25840 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:00 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55108 frag_off:0 ttl:64 proto:50 chk:25840 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:98 frag_off:0 ttl:120 proto:50 chk:979 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=98 (iv)=0xfc74249f069c8a36 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:01 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:98 frag_off:0 ttl:120 proto:4 chk:1057 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16076 frag_off:0 ttl:128 proto:1 chk:12026 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22986 DF frag_off:0 ttl:251 proto:1 chk:22779 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22986 DF frag_off:0 ttl:251 proto:1 chk:22779 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55109 frag_off:0 ttl:64 proto:4 chk:25917 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55109 frag_off:0 ttl:64 proto:50 chk:25839 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:01 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55109 frag_off:0 ttl:64 proto:50 chk:25839 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:99 frag_off:0 ttl:120 proto:50 chk:978 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=99 (iv)=0xf0880905da094991 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:02 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:99 frag_off:0 ttl:120 proto:4 chk:1056 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16077 frag_off:0 ttl:128 proto:1 chk:12025 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22987 DF frag_off:0 ttl:251 proto:1 chk:22778 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22987 DF frag_off:0 ttl:251 proto:1 chk:22778 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55110 frag_off:0 ttl:64 proto:4 chk:25916 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55110 frag_off:0 ttl:64 proto:50 chk:25838 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:02 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55110 frag_off:0 ttl:64 proto:50 chk:25838 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:100 frag_off:0 ttl:120 proto:50 chk:977 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=100 (iv)=0x5ba5803917216181 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:03 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:100 frag_off:0 ttl:120 proto:4 chk:1055 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16078 frag_off:0 ttl:128 proto:1 chk:12024 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22988 DF frag_off:0 ttl:251 proto:1 chk:22777 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22988 DF frag_off:0 ttl:251 proto:1 chk:22777 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55111 frag_off:0 ttl:64 proto:4 chk:25915 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55111 frag_off:0 ttl:64 proto:50 chk:25837 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:03 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55111 frag_off:0 ttl:64 proto:50 chk:25837 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:101 frag_off:0 ttl:120 proto:50 chk:976 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=101 (iv)=0x36aad8ec979324b3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:04 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:101 frag_off:0 ttl:120 proto:4 chk:1054 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16079 frag_off:0 ttl:128 proto:1 chk:12023 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22989 DF frag_off:0 ttl:251 proto:1 chk:22776 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22989 DF frag_off:0 ttl:251 proto:1 chk:22776 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55112 frag_off:0 ttl:64 proto:4 chk:25914 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55112 frag_off:0 ttl:64 proto:50 chk:25836 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:04 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55112 frag_off:0 ttl:64 proto:50 chk:25836 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:102 frag_off:0 ttl:120 proto:50 chk:975 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=102 (iv)=0xce7d91ae93bd4174 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:05 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:102 frag_off:0 ttl:120 proto:4 chk:1053 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16080 frag_off:0 ttl:128 proto:1 chk:12022 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22990 DF frag_off:0 ttl:251 proto:1 chk:22775 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22990 DF frag_off:0 ttl:251 proto:1 chk:22775 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55113 frag_off:0 ttl:64 proto:4 chk:25913 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55113 frag_off:0 ttl:64 proto:50 chk:25835 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:05 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55113 frag_off:0 ttl:64 proto:50 chk:25835 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:103 frag_off:0 ttl:120 proto:50 chk:974 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=103 (iv)=0x2a5cfeeaa6ea2f7e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:06 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:103 frag_off:0 ttl:120 proto:4 chk:1052 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16081 frag_off:0 ttl:128 proto:1 chk:12021 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22991 DF frag_off:0 ttl:251 proto:1 chk:22774 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22991 DF frag_off:0 ttl:251 proto:1 chk:22774 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55114 frag_off:0 ttl:64 proto:4 chk:25912 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55114 frag_off:0 ttl:64 proto:50 chk:25834 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:06 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55114 frag_off:0 ttl:64 proto:50 chk:25834 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:104 frag_off:0 ttl:120 proto:50 chk:973 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=104 (iv)=0xf3c5b8fae2e115e1 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:07 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:104 frag_off:0 ttl:120 proto:4 chk:1051 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16082 frag_off:0 ttl:128 proto:1 chk:12020 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22992 DF frag_off:0 ttl:251 proto:1 chk:22773 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22992 DF frag_off:0 ttl:251 proto:1 chk:22773 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55115 frag_off:0 ttl:64 proto:4 chk:25911 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55115 frag_off:0 ttl:64 proto:50 chk:25833 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:07 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55115 frag_off:0 ttl:64 proto:50 chk:25833 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:105 frag_off:0 ttl:120 proto:50 chk:972 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=105 (iv)=0x53f2740bd0cf58ce iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:08 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:105 frag_off:0 ttl:120 proto:4 chk:1050 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16086 frag_off:0 ttl:128 proto:1 chk:12016 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22993 DF frag_off:0 ttl:251 proto:1 chk:22772 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22993 DF frag_off:0 ttl:251 proto:1 chk:22772 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55116 frag_off:0 ttl:64 proto:4 chk:25910 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55116 frag_off:0 ttl:64 proto:50 chk:25832 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:08 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55116 frag_off:0 ttl:64 proto:50 chk:25832 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:106 frag_off:0 ttl:120 proto:50 chk:971 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=106 (iv)=0xc3619516bea5cd44 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:09 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:106 frag_off:0 ttl:120 proto:4 chk:1049 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16087 frag_off:0 ttl:128 proto:1 chk:12015 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22994 DF frag_off:0 ttl:251 proto:1 chk:22771 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22994 DF frag_off:0 ttl:251 proto:1 chk:22771 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55117 frag_off:0 ttl:64 proto:4 chk:25909 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55117 frag_off:0 ttl:64 proto:50 chk:25831 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:09 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55117 frag_off:0 ttl:64 proto:50 chk:25831 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:107 frag_off:0 ttl:120 proto:50 chk:970 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=107 (iv)=0xade2cd1439ab56ec iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:10 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:107 frag_off:0 ttl:120 proto:4 chk:1048 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16088 frag_off:0 ttl:128 proto:1 chk:12014 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22995 DF frag_off:0 ttl:251 proto:1 chk:22770 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22995 DF frag_off:0 ttl:251 proto:1 chk:22770 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55118 frag_off:0 ttl:64 proto:4 chk:25908 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55118 frag_off:0 ttl:64 proto:50 chk:25830 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:10 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55118 frag_off:0 ttl:64 proto:50 chk:25830 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:108 frag_off:0 ttl:120 proto:50 chk:969 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=108 (iv)=0xd9641533314f0aec iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:11 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:108 frag_off:0 ttl:120 proto:4 chk:1047 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16089 frag_off:0 ttl:128 proto:1 chk:12013 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22996 DF frag_off:0 ttl:251 proto:1 chk:22769 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22996 DF frag_off:0 ttl:251 proto:1 chk:22769 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55119 frag_off:0 ttl:64 proto:4 chk:25907 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55119 frag_off:0 ttl:64 proto:50 chk:25829 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:11 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55119 frag_off:0 ttl:64 proto:50 chk:25829 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:109 frag_off:0 ttl:120 proto:50 chk:968 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=109 (iv)=0x9d8d25d6db79fbcd iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:12 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:109 frag_off:0 ttl:120 proto:4 chk:1046 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16091 frag_off:0 ttl:128 proto:1 chk:12011 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22997 DF frag_off:0 ttl:251 proto:1 chk:22768 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22997 DF frag_off:0 ttl:251 proto:1 chk:22768 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55120 frag_off:0 ttl:64 proto:4 chk:25906 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55120 frag_off:0 ttl:64 proto:50 chk:25828 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:12 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55120 frag_off:0 ttl:64 proto:50 chk:25828 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:@@ flags = 6 @key = c15b4720 key = 00000000->00000000 @mask = 00000000
Jun 23 07:09:13 outside kernel: klips_debug:@@ flags = 4 @key = ced86330 key = 0a010000->c0a8020b @mask = c144d650 mask = ffff0000->ffffffff
Jun 23 07:09:13 outside kernel: klips_debug:* off = 0
Jun 23 07:09:13 outside kernel: klips_debug:@ flags = 6 @key = c15b472c key = ffffffff->ffffffff @mask = 00000000
Jun 23 07:09:13 outside kernel: klips_debug: off = 0
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_eroute_get_info: buffer=0xcbff2000, *start=0x0, offset=0, length=3072
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=c629ff18
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:110 frag_off:0 ttl:120 proto:50 chk:967 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=110 (iv)=0x5dfdecda8d5eb9fe iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:13 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:110 frag_off:0 ttl:120 proto:4 chk:1045 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16094 frag_off:0 ttl:128 proto:1 chk:12008 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:13 outside kernel: klips_debug:<6>klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.@<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f @<6>ip=0a010047->c0a8020b
Jun 23 07:09:13 outside kernel:  flags = 6<6>klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 @key = c15b4720 00 key = 00000000->00000000:e0 @mask = 00000000:81
Jun 23 07:09:13 outside kernel: :01klips_debug::8f@:0f@:00 flags = 4:e0 @key = ced86330:81 key = 0a010000->c0a8020b:01 @mask = c144d650:8f mask = ffff0000->ffffffff:0f
Jun 23 07:09:13 outside kernel: :08klips_debug::00* 
Jun 23 07:09:13 outside kernel: klips_debug:   IP:klips_debug: ihl:20@ ver:4 flags = 6 tos:0 @key = c15b472c tlen:60 key = ffffffff->ffffffff id:22998 @mask = 00000000 DF frag_off:0
Jun 23 07:09:13 outside kernel:  ttl:251klips_debug: proto:1 off = 0
Jun 23 07:09:13 outside kernel:  chk:22767<6>klips_debug:ipsec_eroute_get_info: buffer=0xcbff2000, *start=0x0, offset=78, length=3072
Jun 23 07:09:13 outside kernel:  saddr:10.1.0.71klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6 daddr:192.168.2.11 leaf key = 00000000->00000000
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:09:13 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=c629ff18
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22998 DF frag_off:0 ttl:251 proto:1 chk:22767 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55121 frag_off:0 ttl:64 proto:4 chk:25905 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55121 frag_off:0 ttl:64 proto:50 chk:25827 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:13 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55121 frag_off:0 ttl:64 proto:50 chk:25827 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:111 frag_off:0 ttl:120 proto:50 chk:966 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=111 (iv)=0xb012e25dfdc6bb07 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:14 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:111 frag_off:0 ttl:120 proto:4 chk:1044 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16098 frag_off:0 ttl:128 proto:1 chk:12004 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22999 DF frag_off:0 ttl:251 proto:1 chk:22766 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:22999 DF frag_off:0 ttl:251 proto:1 chk:22766 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55122 frag_off:0 ttl:64 proto:4 chk:25904 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55122 frag_off:0 ttl:64 proto:50 chk:25826 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:14 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55122 frag_off:0 ttl:64 proto:50 chk:25826 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:112 frag_off:0 ttl:120 proto:50 chk:965 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=112 (iv)=0x26dd00e66bfda84a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:15 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:112 frag_off:0 ttl:120 proto:4 chk:1043 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16099 frag_off:0 ttl:128 proto:1 chk:12003 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23000 DF frag_off:0 ttl:251 proto:1 chk:22765 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23000 DF frag_off:0 ttl:251 proto:1 chk:22765 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55123 frag_off:0 ttl:64 proto:4 chk:25903 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55123 frag_off:0 ttl:64 proto:50 chk:25825 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:15 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55123 frag_off:0 ttl:64 proto:50 chk:25825 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:113 frag_off:0 ttl:120 proto:50 chk:964 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=113 (iv)=0x2575882908aead6f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:16 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:113 frag_off:0 ttl:120 proto:4 chk:1042 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16100 frag_off:0 ttl:128 proto:1 chk:12002 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23001 DF frag_off:0 ttl:251 proto:1 chk:22764 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23001 DF frag_off:0 ttl:251 proto:1 chk:22764 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55124 frag_off:0 ttl:64 proto:4 chk:25902 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55124 frag_off:0 ttl:64 proto:50 chk:25824 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:16 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55124 frag_off:0 ttl:64 proto:50 chk:25824 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:114 frag_off:0 ttl:120 proto:50 chk:963 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=114 (iv)=0xa28bf9d237021c6d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:17 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:114 frag_off:0 ttl:120 proto:4 chk:1041 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16101 frag_off:0 ttl:128 proto:1 chk:12001 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23002 DF frag_off:0 ttl:251 proto:1 chk:22763 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23002 DF frag_off:0 ttl:251 proto:1 chk:22763 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55125 frag_off:0 ttl:64 proto:4 chk:25901 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55125 frag_off:0 ttl:64 proto:50 chk:25823 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:17 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55125 frag_off:0 ttl:64 proto:50 chk:25823 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:115 frag_off:0 ttl:120 proto:50 chk:962 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=115 (iv)=0x54ad7b9dfa332b46 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:18 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:115 frag_off:0 ttl:120 proto:4 chk:1040 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16102 frag_off:0 ttl:128 proto:1 chk:12000 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23003 DF frag_off:0 ttl:251 proto:1 chk:22762 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23003 DF frag_off:0 ttl:251 proto:1 chk:22762 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55126 frag_off:0 ttl:64 proto:4 chk:25900 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55126 frag_off:0 ttl:64 proto:50 chk:25822 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:18 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55126 frag_off:0 ttl:64 proto:50 chk:25822 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:116 frag_off:0 ttl:120 proto:50 chk:961 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=116 (iv)=0xee78a1911f1fb526 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:19 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:116 frag_off:0 ttl:120 proto:4 chk:1039 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16103 frag_off:0 ttl:128 proto:1 chk:11999 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23004 DF frag_off:0 ttl:251 proto:1 chk:22761 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23004 DF frag_off:0 ttl:251 proto:1 chk:22761 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55127 frag_off:0 ttl:64 proto:4 chk:25899 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55127 frag_off:0 ttl:64 proto:50 chk:25821 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:19 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55127 frag_off:0 ttl:64 proto:50 chk:25821 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:117 frag_off:0 ttl:120 proto:50 chk:960 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=117 (iv)=0xa4d29b2adce56e2d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:20 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:117 frag_off:0 ttl:120 proto:4 chk:1038 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16104 frag_off:0 ttl:128 proto:1 chk:11998 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23005 DF frag_off:0 ttl:251 proto:1 chk:22760 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23005 DF frag_off:0 ttl:251 proto:1 chk:22760 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55128 frag_off:0 ttl:64 proto:4 chk:25898 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55128 frag_off:0 ttl:64 proto:50 chk:25820 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:20 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55128 frag_off:0 ttl:64 proto:50 chk:25820 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:118 frag_off:0 ttl:120 proto:50 chk:959 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=118 (iv)=0x6b961eabc3e266db iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:21 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:118 frag_off:0 ttl:120 proto:4 chk:1037 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16105 frag_off:0 ttl:128 proto:1 chk:11997 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23006 DF frag_off:0 ttl:251 proto:1 chk:22759 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23006 DF frag_off:0 ttl:251 proto:1 chk:22759 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55129 frag_off:0 ttl:64 proto:4 chk:25897 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55129 frag_off:0 ttl:64 proto:50 chk:25819 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:21 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55129 frag_off:0 ttl:64 proto:50 chk:25819 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:119 frag_off:0 ttl:120 proto:50 chk:958 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=119 (iv)=0xc65ccf3d57fb20ca iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:22 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:119 frag_off:0 ttl:120 proto:4 chk:1036 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16106 frag_off:0 ttl:128 proto:1 chk:11996 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23007 DF frag_off:0 ttl:251 proto:1 chk:22758 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23007 DF frag_off:0 ttl:251 proto:1 chk:22758 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55130 frag_off:0 ttl:64 proto:4 chk:25896 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55130 frag_off:0 ttl:64 proto:50 chk:25818 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:22 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55130 frag_off:0 ttl:64 proto:50 chk:25818 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:120 frag_off:0 ttl:120 proto:50 chk:957 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=120 (iv)=0x4da3a1fe2444c95f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:23 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:120 frag_off:0 ttl:120 proto:4 chk:1035 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16107 frag_off:0 ttl:128 proto:1 chk:11995 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23008 DF frag_off:0 ttl:251 proto:1 chk:22757 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23008 DF frag_off:0 ttl:251 proto:1 chk:22757 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55131 frag_off:0 ttl:64 proto:4 chk:25895 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55131 frag_off:0 ttl:64 proto:50 chk:25817 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:23 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55131 frag_off:0 ttl:64 proto:50 chk:25817 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:121 frag_off:0 ttl:120 proto:50 chk:956 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=121 (iv)=0xcd715a0ee1ea57a7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:24 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:121 frag_off:0 ttl:120 proto:4 chk:1034 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16111 frag_off:0 ttl:128 proto:1 chk:11991 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23009 DF frag_off:0 ttl:251 proto:1 chk:22756 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23009 DF frag_off:0 ttl:251 proto:1 chk:22756 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55132 frag_off:0 ttl:64 proto:4 chk:25894 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55132 frag_off:0 ttl:64 proto:50 chk:25816 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:24 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55132 frag_off:0 ttl:64 proto:50 chk:25816 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:122 frag_off:0 ttl:120 proto:50 chk:955 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=122 (iv)=0x4ca0fe7687f98b1a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:25 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:122 frag_off:0 ttl:120 proto:4 chk:1033 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16114 frag_off:0 ttl:128 proto:1 chk:11988 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23010 DF frag_off:0 ttl:251 proto:1 chk:22755 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23010 DF frag_off:0 ttl:251 proto:1 chk:22755 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55133 frag_off:0 ttl:64 proto:4 chk:25893 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55133 frag_off:0 ttl:64 proto:50 chk:25815 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:25 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55133 frag_off:0 ttl:64 proto:50 chk:25815 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:123 frag_off:0 ttl:120 proto:50 chk:954 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=123 (iv)=0xf5bdbd817dfd5c46 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:26 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:123 frag_off:0 ttl:120 proto:4 chk:1032 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16115 frag_off:0 ttl:128 proto:1 chk:11987 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23011 DF frag_off:0 ttl:251 proto:1 chk:22754 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23011 DF frag_off:0 ttl:251 proto:1 chk:22754 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55134 frag_off:0 ttl:64 proto:4 chk:25892 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55134 frag_off:0 ttl:64 proto:50 chk:25814 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:26 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55134 frag_off:0 ttl:64 proto:50 chk:25814 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:124 frag_off:0 ttl:120 proto:50 chk:953 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=124 (iv)=0xa490afb794d01ff0 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:27 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:124 frag_off:0 ttl:120 proto:4 chk:1031 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16116 frag_off:0 ttl:128 proto:1 chk:11986 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23012 DF frag_off:0 ttl:251 proto:1 chk:22753 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23012 DF frag_off:0 ttl:251 proto:1 chk:22753 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55135 frag_off:0 ttl:64 proto:4 chk:25891 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55135 frag_off:0 ttl:64 proto:50 chk:25813 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:27 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55135 frag_off:0 ttl:64 proto:50 chk:25813 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:125 frag_off:0 ttl:120 proto:50 chk:952 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=125 (iv)=0x322196b78516bb10 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:28 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:125 frag_off:0 ttl:120 proto:4 chk:1030 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16117 frag_off:0 ttl:128 proto:1 chk:11985 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23013 DF frag_off:0 ttl:251 proto:1 chk:22752 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23013 DF frag_off:0 ttl:251 proto:1 chk:22752 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55136 frag_off:0 ttl:64 proto:4 chk:25890 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55136 frag_off:0 ttl:64 proto:50 chk:25812 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:28 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55136 frag_off:0 ttl:64 proto:50 chk:25812 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:126 frag_off:0 ttl:120 proto:50 chk:951 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=126 (iv)=0xda554bd7b8221c69 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:29 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:126 frag_off:0 ttl:120 proto:4 chk:1029 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16118 frag_off:0 ttl:128 proto:1 chk:11984 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23014 DF frag_off:0 ttl:251 proto:1 chk:22751 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23014 DF frag_off:0 ttl:251 proto:1 chk:22751 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55137 frag_off:0 ttl:64 proto:4 chk:25889 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55137 frag_off:0 ttl:64 proto:50 chk:25811 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:29 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55137 frag_off:0 ttl:64 proto:50 chk:25811 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:127 frag_off:0 ttl:120 proto:50 chk:950 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=127 (iv)=0xeee75db9f4b2d176 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:30 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:127 frag_off:0 ttl:120 proto:4 chk:1028 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16119 frag_off:0 ttl:128 proto:1 chk:11983 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23015 DF frag_off:0 ttl:251 proto:1 chk:22750 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23015 DF frag_off:0 ttl:251 proto:1 chk:22750 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55138 frag_off:0 ttl:64 proto:4 chk:25888 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55138 frag_off:0 ttl:64 proto:50 chk:25810 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:30 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55138 frag_off:0 ttl:64 proto:50 chk:25810 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:128 frag_off:0 ttl:120 proto:50 chk:949 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=128 (iv)=0x2b672d3e3497df2a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:31 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:128 frag_off:0 ttl:120 proto:4 chk:1027 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16120 frag_off:0 ttl:128 proto:1 chk:11982 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23016 DF frag_off:0 ttl:251 proto:1 chk:22749 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23016 DF frag_off:0 ttl:251 proto:1 chk:22749 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55139 frag_off:0 ttl:64 proto:4 chk:25887 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55139 frag_off:0 ttl:64 proto:50 chk:25809 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:31 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55139 frag_off:0 ttl:64 proto:50 chk:25809 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:129 frag_off:0 ttl:120 proto:50 chk:948 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=129 (iv)=0x1790fe080438f735 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:32 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:129 frag_off:0 ttl:120 proto:4 chk:1026 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16126 frag_off:0 ttl:128 proto:1 chk:11976 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23017 DF frag_off:0 ttl:251 proto:1 chk:22748 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23017 DF frag_off:0 ttl:251 proto:1 chk:22748 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55140 frag_off:0 ttl:64 proto:4 chk:25886 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55140 frag_off:0 ttl:64 proto:50 chk:25808 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:32 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55140 frag_off:0 ttl:64 proto:50 chk:25808 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:130 frag_off:0 ttl:120 proto:50 chk:947 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=130 (iv)=0x95772f9d0304ae56 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:33 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:130 frag_off:0 ttl:120 proto:4 chk:1025 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16130 frag_off:0 ttl:128 proto:1 chk:11972 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23018 DF frag_off:0 ttl:251 proto:1 chk:22747 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23018 DF frag_off:0 ttl:251 proto:1 chk:22747 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55141 frag_off:0 ttl:64 proto:4 chk:25885 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55141 frag_off:0 ttl:64 proto:50 chk:25807 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:33 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55141 frag_off:0 ttl:64 proto:50 chk:25807 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:131 frag_off:0 ttl:120 proto:50 chk:946 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=131 (iv)=0x566e5e992d2d2414 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:34 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:131 frag_off:0 ttl:120 proto:4 chk:1024 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16133 frag_off:0 ttl:128 proto:1 chk:11969 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23019 DF frag_off:0 ttl:251 proto:1 chk:22746 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23019 DF frag_off:0 ttl:251 proto:1 chk:22746 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55142 frag_off:0 ttl:64 proto:4 chk:25884 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55142 frag_off:0 ttl:64 proto:50 chk:25806 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:34 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55142 frag_off:0 ttl:64 proto:50 chk:25806 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:132 frag_off:0 ttl:120 proto:50 chk:945 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=132 (iv)=0x1f0460eca6081b6a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:35 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:132 frag_off:0 ttl:120 proto:4 chk:1023 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16137 frag_off:0 ttl:128 proto:1 chk:11965 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23020 DF frag_off:0 ttl:251 proto:1 chk:22745 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23020 DF frag_off:0 ttl:251 proto:1 chk:22745 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55143 frag_off:0 ttl:64 proto:4 chk:25883 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55143 frag_off:0 ttl:64 proto:50 chk:25805 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:35 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55143 frag_off:0 ttl:64 proto:50 chk:25805 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:133 frag_off:0 ttl:120 proto:50 chk:944 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=133 (iv)=0x4c6f6054bd895ea5 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:36 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:133 frag_off:0 ttl:120 proto:4 chk:1022 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16138 frag_off:0 ttl:128 proto:1 chk:11964 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23021 DF frag_off:0 ttl:251 proto:1 chk:22744 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23021 DF frag_off:0 ttl:251 proto:1 chk:22744 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55144 frag_off:0 ttl:64 proto:4 chk:25882 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55144 frag_off:0 ttl:64 proto:50 chk:25804 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:36 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55144 frag_off:0 ttl:64 proto:50 chk:25804 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:134 frag_off:0 ttl:120 proto:50 chk:943 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=134 (iv)=0x4162a857a48e39d4 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:37 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:134 frag_off:0 ttl:120 proto:4 chk:1021 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16141 frag_off:0 ttl:128 proto:1 chk:11961 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23022 DF frag_off:0 ttl:251 proto:1 chk:22743 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23022 DF frag_off:0 ttl:251 proto:1 chk:22743 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55145 frag_off:0 ttl:64 proto:4 chk:25881 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55145 frag_off:0 ttl:64 proto:50 chk:25803 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:37 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55145 frag_off:0 ttl:64 proto:50 chk:25803 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:135 frag_off:0 ttl:120 proto:50 chk:942 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=135 (iv)=0xa88b683123e37d77 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:38 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:135 frag_off:0 ttl:120 proto:4 chk:1020 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16145 frag_off:0 ttl:128 proto:1 chk:11957 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23023 DF frag_off:0 ttl:251 proto:1 chk:22742 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23023 DF frag_off:0 ttl:251 proto:1 chk:22742 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55146 frag_off:0 ttl:64 proto:4 chk:25880 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55146 frag_off:0 ttl:64 proto:50 chk:25802 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:38 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55146 frag_off:0 ttl:64 proto:50 chk:25802 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:136 frag_off:0 ttl:120 proto:50 chk:941 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=136 (iv)=0x6749df632cda5f31 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:39 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:136 frag_off:0 ttl:120 proto:4 chk:1019 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16149 frag_off:0 ttl:128 proto:1 chk:11953 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23024 DF frag_off:0 ttl:251 proto:1 chk:22741 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23024 DF frag_off:0 ttl:251 proto:1 chk:22741 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55147 frag_off:0 ttl:64 proto:4 chk:25879 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55147 frag_off:0 ttl:64 proto:50 chk:25801 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:39 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55147 frag_off:0 ttl:64 proto:50 chk:25801 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:137 frag_off:0 ttl:120 proto:50 chk:940 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=137 (iv)=0x1ed82130912f52fa iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:40 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:137 frag_off:0 ttl:120 proto:4 chk:1018 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16150 frag_off:0 ttl:128 proto:1 chk:11952 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23025 DF frag_off:0 ttl:251 proto:1 chk:22740 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23025 DF frag_off:0 ttl:251 proto:1 chk:22740 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55148 frag_off:0 ttl:64 proto:4 chk:25878 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55148 frag_off:0 ttl:64 proto:50 chk:25800 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:40 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55148 frag_off:0 ttl:64 proto:50 chk:25800 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:138 frag_off:0 ttl:120 proto:50 chk:939 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=138 (iv)=0x11487d06b600c38f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:41 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:138 frag_off:0 ttl:120 proto:4 chk:1017 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16154 frag_off:0 ttl:128 proto:1 chk:11948 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23026 DF frag_off:0 ttl:251 proto:1 chk:22739 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23026 DF frag_off:0 ttl:251 proto:1 chk:22739 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55149 frag_off:0 ttl:64 proto:4 chk:25877 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55149 frag_off:0 ttl:64 proto:50 chk:25799 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:41 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55149 frag_off:0 ttl:64 proto:50 chk:25799 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:139 frag_off:0 ttl:120 proto:50 chk:938 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=139 (iv)=0xc1ad7e0700de6996 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:42 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:139 frag_off:0 ttl:120 proto:4 chk:1016 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16158 frag_off:0 ttl:128 proto:1 chk:11944 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23027 DF frag_off:0 ttl:251 proto:1 chk:22738 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23027 DF frag_off:0 ttl:251 proto:1 chk:22738 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55150 frag_off:0 ttl:64 proto:4 chk:25876 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55150 frag_off:0 ttl:64 proto:50 chk:25798 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:42 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55150 frag_off:0 ttl:64 proto:50 chk:25798 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:140 frag_off:0 ttl:120 proto:50 chk:937 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=140 (iv)=0xc828a910a9c9118c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:43 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:140 frag_off:0 ttl:120 proto:4 chk:1015 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16159 frag_off:0 ttl:128 proto:1 chk:11943 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23028 DF frag_off:0 ttl:251 proto:1 chk:22737 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23028 DF frag_off:0 ttl:251 proto:1 chk:22737 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55151 frag_off:0 ttl:64 proto:4 chk:25875 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55151 frag_off:0 ttl:64 proto:50 chk:25797 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:43 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55151 frag_off:0 ttl:64 proto:50 chk:25797 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:141 frag_off:0 ttl:120 proto:50 chk:936 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=141 (iv)=0xe847a3cc2dc43db2 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:44 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:141 frag_off:0 ttl:120 proto:4 chk:1014 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16160 frag_off:0 ttl:128 proto:1 chk:11942 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23029 DF frag_off:0 ttl:251 proto:1 chk:22736 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23029 DF frag_off:0 ttl:251 proto:1 chk:22736 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55152 frag_off:0 ttl:64 proto:4 chk:25874 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55152 frag_off:0 ttl:64 proto:50 chk:25796 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:44 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55152 frag_off:0 ttl:64 proto:50 chk:25796 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:142 frag_off:0 ttl:120 proto:50 chk:935 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=142 (iv)=0x9e2bbcb630317f2b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:45 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:142 frag_off:0 ttl:120 proto:4 chk:1013 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16161 frag_off:0 ttl:128 proto:1 chk:11941 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23030 DF frag_off:0 ttl:251 proto:1 chk:22735 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23030 DF frag_off:0 ttl:251 proto:1 chk:22735 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55153 frag_off:0 ttl:64 proto:4 chk:25873 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55153 frag_off:0 ttl:64 proto:50 chk:25795 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:45 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55153 frag_off:0 ttl:64 proto:50 chk:25795 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:143 frag_off:0 ttl:120 proto:50 chk:934 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=143 (iv)=0x6e829092a062967e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:46 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:143 frag_off:0 ttl:120 proto:4 chk:1012 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16162 frag_off:0 ttl:128 proto:1 chk:11940 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23031 DF frag_off:0 ttl:251 proto:1 chk:22734 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23031 DF frag_off:0 ttl:251 proto:1 chk:22734 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55154 frag_off:0 ttl:64 proto:4 chk:25872 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55154 frag_off:0 ttl:64 proto:50 chk:25794 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:46 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55154 frag_off:0 ttl:64 proto:50 chk:25794 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:144 frag_off:0 ttl:120 proto:50 chk:933 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=144 (iv)=0x6e9fa19e06bcbb5c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:47 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:144 frag_off:0 ttl:120 proto:4 chk:1011 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16163 frag_off:0 ttl:128 proto:1 chk:11939 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23032 DF frag_off:0 ttl:251 proto:1 chk:22733 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23032 DF frag_off:0 ttl:251 proto:1 chk:22733 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55155 frag_off:0 ttl:64 proto:4 chk:25871 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55155 frag_off:0 ttl:64 proto:50 chk:25793 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:47 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55155 frag_off:0 ttl:64 proto:50 chk:25793 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:145 frag_off:0 ttl:120 proto:50 chk:932 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=145 (iv)=0xba9817f314c815d1 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:48 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:145 frag_off:0 ttl:120 proto:4 chk:1010 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16164 frag_off:0 ttl:128 proto:1 chk:11938 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23033 DF frag_off:0 ttl:251 proto:1 chk:22732 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23033 DF frag_off:0 ttl:251 proto:1 chk:22732 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55156 frag_off:0 ttl:64 proto:4 chk:25870 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55156 frag_off:0 ttl:64 proto:50 chk:25792 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:48 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55156 frag_off:0 ttl:64 proto:50 chk:25792 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:146 frag_off:0 ttl:120 proto:50 chk:931 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=146 (iv)=0x9630e4cf5e45ce20 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:49 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:146 frag_off:0 ttl:120 proto:4 chk:1009 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16165 frag_off:0 ttl:128 proto:1 chk:11937 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23034 DF frag_off:0 ttl:251 proto:1 chk:22731 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23034 DF frag_off:0 ttl:251 proto:1 chk:22731 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55157 frag_off:0 ttl:64 proto:4 chk:25869 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55157 frag_off:0 ttl:64 proto:50 chk:25791 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:49 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55157 frag_off:0 ttl:64 proto:50 chk:25791 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:147 frag_off:0 ttl:120 proto:50 chk:930 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=147 (iv)=0xbb60ef936f63b16d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:50 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:147 frag_off:0 ttl:120 proto:4 chk:1008 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16166 frag_off:0 ttl:128 proto:1 chk:11936 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23035 DF frag_off:0 ttl:251 proto:1 chk:22730 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23035 DF frag_off:0 ttl:251 proto:1 chk:22730 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55158 frag_off:0 ttl:64 proto:4 chk:25868 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55158 frag_off:0 ttl:64 proto:50 chk:25790 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:50 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55158 frag_off:0 ttl:64 proto:50 chk:25790 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:148 frag_off:0 ttl:120 proto:50 chk:929 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=148 (iv)=0x6f3463cbef9e3800 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:51 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:148 frag_off:0 ttl:120 proto:4 chk:1007 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16167 frag_off:0 ttl:128 proto:1 chk:11935 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23036 DF frag_off:0 ttl:251 proto:1 chk:22729 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23036 DF frag_off:0 ttl:251 proto:1 chk:22729 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55159 frag_off:0 ttl:64 proto:4 chk:25867 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55159 frag_off:0 ttl:64 proto:50 chk:25789 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:51 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55159 frag_off:0 ttl:64 proto:50 chk:25789 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:149 frag_off:0 ttl:120 proto:50 chk:928 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=149 (iv)=0x2e212d9522e48340 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:52 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:149 frag_off:0 ttl:120 proto:4 chk:1006 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16168 frag_off:0 ttl:128 proto:1 chk:11934 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23037 DF frag_off:0 ttl:251 proto:1 chk:22728 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23037 DF frag_off:0 ttl:251 proto:1 chk:22728 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55160 frag_off:0 ttl:64 proto:4 chk:25866 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55160 frag_off:0 ttl:64 proto:50 chk:25788 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:52 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55160 frag_off:0 ttl:64 proto:50 chk:25788 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:150 frag_off:0 ttl:120 proto:50 chk:927 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=150 (iv)=0xa5669dd022d06a81 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:53 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:150 frag_off:0 ttl:120 proto:4 chk:1005 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16169 frag_off:0 ttl:128 proto:1 chk:11933 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23038 DF frag_off:0 ttl:251 proto:1 chk:22727 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23038 DF frag_off:0 ttl:251 proto:1 chk:22727 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55161 frag_off:0 ttl:64 proto:4 chk:25865 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55161 frag_off:0 ttl:64 proto:50 chk:25787 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:53 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55161 frag_off:0 ttl:64 proto:50 chk:25787 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:151 frag_off:0 ttl:120 proto:50 chk:926 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=151 (iv)=0xfc648bd260798951 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:54 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:151 frag_off:0 ttl:120 proto:4 chk:1004 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16170 frag_off:0 ttl:128 proto:1 chk:11932 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23039 DF frag_off:0 ttl:251 proto:1 chk:22726 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23039 DF frag_off:0 ttl:251 proto:1 chk:22726 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55162 frag_off:0 ttl:64 proto:4 chk:25864 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55162 frag_off:0 ttl:64 proto:50 chk:25786 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:54 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55162 frag_off:0 ttl:64 proto:50 chk:25786 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:152 frag_off:0 ttl:120 proto:50 chk:925 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=152 (iv)=0xda5cc3f4a6036b1f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:55 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:152 frag_off:0 ttl:120 proto:4 chk:1003 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16171 frag_off:0 ttl:128 proto:1 chk:11931 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23040 DF frag_off:0 ttl:251 proto:1 chk:22725 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23040 DF frag_off:0 ttl:251 proto:1 chk:22725 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55163 frag_off:0 ttl:64 proto:4 chk:25863 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55163 frag_off:0 ttl:64 proto:50 chk:25785 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:55 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55163 frag_off:0 ttl:64 proto:50 chk:25785 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:153 frag_off:0 ttl:120 proto:50 chk:924 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=153 (iv)=0x3211f0c0dacdaa13 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:56 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:153 frag_off:0 ttl:120 proto:4 chk:1002 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16175 frag_off:0 ttl:128 proto:1 chk:11927 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23041 DF frag_off:0 ttl:251 proto:1 chk:22724 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23041 DF frag_off:0 ttl:251 proto:1 chk:22724 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55164 frag_off:0 ttl:64 proto:4 chk:25862 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55164 frag_off:0 ttl:64 proto:50 chk:25784 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:56 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55164 frag_off:0 ttl:64 proto:50 chk:25784 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:154 frag_off:0 ttl:120 proto:50 chk:923 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=154 (iv)=0xb0cc24a1614ad29f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:57 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:154 frag_off:0 ttl:120 proto:4 chk:1001 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16176 frag_off:0 ttl:128 proto:1 chk:11926 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23042 DF frag_off:0 ttl:251 proto:1 chk:22723 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23042 DF frag_off:0 ttl:251 proto:1 chk:22723 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55165 frag_off:0 ttl:64 proto:4 chk:25861 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55165 frag_off:0 ttl:64 proto:50 chk:25783 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:57 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55165 frag_off:0 ttl:64 proto:50 chk:25783 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:155 frag_off:0 ttl:120 proto:50 chk:922 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=155 (iv)=0xfd7e6294d2a3f47b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:58 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:155 frag_off:0 ttl:120 proto:4 chk:1000 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16177 frag_off:0 ttl:128 proto:1 chk:11925 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23043 DF frag_off:0 ttl:251 proto:1 chk:22722 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23043 DF frag_off:0 ttl:251 proto:1 chk:22722 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55166 frag_off:0 ttl:64 proto:4 chk:25860 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55166 frag_off:0 ttl:64 proto:50 chk:25782 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:58 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55166 frag_off:0 ttl:64 proto:50 chk:25782 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:156 frag_off:0 ttl:120 proto:50 chk:921 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=156 (iv)=0x682356f0ab31d4c3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:09:59 outside kernel: klips_debug:           00: 01 02
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:156 frag_off:0 ttl:120 proto:4 chk:999 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16180 frag_off:0 ttl:128 proto:1 chk:11922 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23044 DF frag_off:0 ttl:251 proto:1 chk:22721 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:09:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23044 DF frag_off:0 ttl:251 proto:1 chk:22721 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55167 frag_off:0 ttl:64 proto:4 chk:25859 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55167 frag_off:0 ttl:64 proto:50 chk:25781 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:09:59 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:09:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:09:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55167 frag_off:0 ttl:64 proto:50 chk:25781 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:157 frag_off:0 ttl:120 proto:50 chk:920 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=157 (iv)=0x4fae61acf4d4027a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:00 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:157 frag_off:0 ttl:120 proto:4 chk:998 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16181 frag_off:0 ttl:128 proto:1 chk:11921 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23045 DF frag_off:0 ttl:251 proto:1 chk:22720 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23045 DF frag_off:0 ttl:251 proto:1 chk:22720 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55168 frag_off:0 ttl:64 proto:4 chk:25858 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55168 frag_off:0 ttl:64 proto:50 chk:25780 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:00 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55168 frag_off:0 ttl:64 proto:50 chk:25780 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:158 frag_off:0 ttl:120 proto:50 chk:919 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=158 (iv)=0x88d43b79f27b7d6a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:01 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:158 frag_off:0 ttl:120 proto:4 chk:997 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16182 frag_off:0 ttl:128 proto:1 chk:11920 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23046 DF frag_off:0 ttl:251 proto:1 chk:22719 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23046 DF frag_off:0 ttl:251 proto:1 chk:22719 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55169 frag_off:0 ttl:64 proto:4 chk:25857 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55169 frag_off:0 ttl:64 proto:50 chk:25779 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:01 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55169 frag_off:0 ttl:64 proto:50 chk:25779 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:159 frag_off:0 ttl:120 proto:50 chk:918 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=159 (iv)=0xe9c65e5284f02572 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:02 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:159 frag_off:0 ttl:120 proto:4 chk:996 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16183 frag_off:0 ttl:128 proto:1 chk:11919 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23047 DF frag_off:0 ttl:251 proto:1 chk:22718 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23047 DF frag_off:0 ttl:251 proto:1 chk:22718 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55170 frag_off:0 ttl:64 proto:4 chk:25856 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55170 frag_off:0 ttl:64 proto:50 chk:25778 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:02 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55170 frag_off:0 ttl:64 proto:50 chk:25778 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:160 frag_off:0 ttl:120 proto:50 chk:917 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=160 (iv)=0x755a2b87d13f9dd1 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:03 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:160 frag_off:0 ttl:120 proto:4 chk:995 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16184 frag_off:0 ttl:128 proto:1 chk:11918 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23048 DF frag_off:0 ttl:251 proto:1 chk:22717 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23048 DF frag_off:0 ttl:251 proto:1 chk:22717 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55171 frag_off:0 ttl:64 proto:4 chk:25855 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55171 frag_off:0 ttl:64 proto:50 chk:25777 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:03 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55171 frag_off:0 ttl:64 proto:50 chk:25777 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:161 frag_off:0 ttl:120 proto:50 chk:916 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=161 (iv)=0x657f418f7961a3b8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:04 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:161 frag_off:0 ttl:120 proto:4 chk:994 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16185 frag_off:0 ttl:128 proto:1 chk:11917 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23049 DF frag_off:0 ttl:251 proto:1 chk:22716 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23049 DF frag_off:0 ttl:251 proto:1 chk:22716 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55172 frag_off:0 ttl:64 proto:4 chk:25854 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55172 frag_off:0 ttl:64 proto:50 chk:25776 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:04 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55172 frag_off:0 ttl:64 proto:50 chk:25776 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:162 frag_off:0 ttl:120 proto:50 chk:915 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=162 (iv)=0x5a56fd386f935348 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:05 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:162 frag_off:0 ttl:120 proto:4 chk:993 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16186 frag_off:0 ttl:128 proto:1 chk:11916 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23050 DF frag_off:0 ttl:251 proto:1 chk:22715 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23050 DF frag_off:0 ttl:251 proto:1 chk:22715 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55173 frag_off:0 ttl:64 proto:4 chk:25853 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55173 frag_off:0 ttl:64 proto:50 chk:25775 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:05 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55173 frag_off:0 ttl:64 proto:50 chk:25775 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:163 frag_off:0 ttl:120 proto:50 chk:914 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=163 (iv)=0x8d3d2e79b5baadd9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:06 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:163 frag_off:0 ttl:120 proto:4 chk:992 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16187 frag_off:0 ttl:128 proto:1 chk:11915 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23051 DF frag_off:0 ttl:251 proto:1 chk:22714 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23051 DF frag_off:0 ttl:251 proto:1 chk:22714 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55174 frag_off:0 ttl:64 proto:4 chk:25852 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55174 frag_off:0 ttl:64 proto:50 chk:25774 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:06 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55174 frag_off:0 ttl:64 proto:50 chk:25774 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:164 frag_off:0 ttl:120 proto:50 chk:913 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=164 (iv)=0x6b12eff303341535 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:07 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:164 frag_off:0 ttl:120 proto:4 chk:991 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16188 frag_off:0 ttl:128 proto:1 chk:11914 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23052 DF frag_off:0 ttl:251 proto:1 chk:22713 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23052 DF frag_off:0 ttl:251 proto:1 chk:22713 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55175 frag_off:0 ttl:64 proto:4 chk:25851 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55175 frag_off:0 ttl:64 proto:50 chk:25773 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:07 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55175 frag_off:0 ttl:64 proto:50 chk:25773 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:165 frag_off:0 ttl:120 proto:50 chk:912 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=165 (iv)=0x537b2b9409037eb9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:08 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:165 frag_off:0 ttl:120 proto:4 chk:990 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16189 frag_off:0 ttl:128 proto:1 chk:11913 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23053 DF frag_off:0 ttl:251 proto:1 chk:22712 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23053 DF frag_off:0 ttl:251 proto:1 chk:22712 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55176 frag_off:0 ttl:64 proto:4 chk:25850 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55176 frag_off:0 ttl:64 proto:50 chk:25772 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:08 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55176 frag_off:0 ttl:64 proto:50 chk:25772 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:166 frag_off:0 ttl:120 proto:50 chk:911 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=166 (iv)=0xa80a355b23b3153d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:09 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:166 frag_off:0 ttl:120 proto:4 chk:989 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16190 frag_off:0 ttl:128 proto:1 chk:11912 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23054 DF frag_off:0 ttl:251 proto:1 chk:22711 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23054 DF frag_off:0 ttl:251 proto:1 chk:22711 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55177 frag_off:0 ttl:64 proto:4 chk:25849 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55177 frag_off:0 ttl:64 proto:50 chk:25771 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:09 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55177 frag_off:0 ttl:64 proto:50 chk:25771 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:167 frag_off:0 ttl:120 proto:50 chk:910 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=167 (iv)=0x4842e88c586f758d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:10 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:167 frag_off:0 ttl:120 proto:4 chk:988 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16191 frag_off:0 ttl:128 proto:1 chk:11911 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23055 DF frag_off:0 ttl:251 proto:1 chk:22710 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23055 DF frag_off:0 ttl:251 proto:1 chk:22710 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55178 frag_off:0 ttl:64 proto:4 chk:25848 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55178 frag_off:0 ttl:64 proto:50 chk:25770 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:10 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55178 frag_off:0 ttl:64 proto:50 chk:25770 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:168 frag_off:0 ttl:120 proto:50 chk:909 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=168 (iv)=0xc254c43e6d72de7a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:11 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:168 frag_off:0 ttl:120 proto:4 chk:987 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16195 frag_off:0 ttl:128 proto:1 chk:11907 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23056 DF frag_off:0 ttl:251 proto:1 chk:22709 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23056 DF frag_off:0 ttl:251 proto:1 chk:22709 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55179 frag_off:0 ttl:64 proto:4 chk:25847 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55179 frag_off:0 ttl:64 proto:50 chk:25769 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:11 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55179 frag_off:0 ttl:64 proto:50 chk:25769 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:169 frag_off:0 ttl:120 proto:50 chk:908 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=169 (iv)=0xe0052476467de81c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:12 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:169 frag_off:0 ttl:120 proto:4 chk:986 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16196 frag_off:0 ttl:128 proto:1 chk:11906 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23057 DF frag_off:0 ttl:251 proto:1 chk:22708 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23057 DF frag_off:0 ttl:251 proto:1 chk:22708 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55180 frag_off:0 ttl:64 proto:4 chk:25846 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55180 frag_off:0 ttl:64 proto:50 chk:25768 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:12 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55180 frag_off:0 ttl:64 proto:50 chk:25768 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:170 frag_off:0 ttl:120 proto:50 chk:907 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=170 (iv)=0xf68c94a23ff8f872 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:13 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:170 frag_off:0 ttl:120 proto:4 chk:985 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16197 frag_off:0 ttl:128 proto:1 chk:11905 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23058 DF frag_off:0 ttl:251 proto:1 chk:22707 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:13 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23058 DF frag_off:0 ttl:251 proto:1 chk:22707 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55181 frag_off:0 ttl:64 proto:4 chk:25845 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55181 frag_off:0 ttl:64 proto:50 chk:25767 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:13 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:13 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:13 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55181 frag_off:0 ttl:64 proto:50 chk:25767 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:171 frag_off:0 ttl:120 proto:50 chk:906 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=171 (iv)=0x9a15cc396b72287f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:14 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:171 frag_off:0 ttl:120 proto:4 chk:984 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16200 frag_off:0 ttl:128 proto:1 chk:11902 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23059 DF frag_off:0 ttl:251 proto:1 chk:22706 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23059 DF frag_off:0 ttl:251 proto:1 chk:22706 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55182 frag_off:0 ttl:64 proto:4 chk:25844 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55182 frag_off:0 ttl:64 proto:50 chk:25766 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:14 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55182 frag_off:0 ttl:64 proto:50 chk:25766 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:172 frag_off:0 ttl:120 proto:50 chk:905 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=172 (iv)=0x1c539955410c7ee3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:15 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:172 frag_off:0 ttl:120 proto:4 chk:983 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16204 frag_off:0 ttl:128 proto:1 chk:11898 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23060 DF frag_off:0 ttl:251 proto:1 chk:22705 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23060 DF frag_off:0 ttl:251 proto:1 chk:22705 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55183 frag_off:0 ttl:64 proto:4 chk:25843 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55183 frag_off:0 ttl:64 proto:50 chk:25765 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:15 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55183 frag_off:0 ttl:64 proto:50 chk:25765 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:173 frag_off:0 ttl:120 proto:50 chk:904 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=173 (iv)=0x353fccb4cd081c82 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:16 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:173 frag_off:0 ttl:120 proto:4 chk:982 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16205 frag_off:0 ttl:128 proto:1 chk:11897 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23061 DF frag_off:0 ttl:251 proto:1 chk:22704 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23061 DF frag_off:0 ttl:251 proto:1 chk:22704 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55184 frag_off:0 ttl:64 proto:4 chk:25842 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55184 frag_off:0 ttl:64 proto:50 chk:25764 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:16 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55184 frag_off:0 ttl:64 proto:50 chk:25764 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:174 frag_off:0 ttl:120 proto:50 chk:903 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=174 (iv)=0x3ce316c6cb9d04ec iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:17 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:174 frag_off:0 ttl:120 proto:4 chk:981 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16208 frag_off:0 ttl:128 proto:1 chk:11894 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23062 DF frag_off:0 ttl:251 proto:1 chk:22703 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23062 DF frag_off:0 ttl:251 proto:1 chk:22703 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55185 frag_off:0 ttl:64 proto:4 chk:25841 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55185 frag_off:0 ttl:64 proto:50 chk:25763 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:17 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55185 frag_off:0 ttl:64 proto:50 chk:25763 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:175 frag_off:0 ttl:120 proto:50 chk:902 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=175 (iv)=0x5af3e8b48a6ad2dc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:18 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:175 frag_off:0 ttl:120 proto:4 chk:980 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16209 frag_off:0 ttl:128 proto:1 chk:11893 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23063 DF frag_off:0 ttl:251 proto:1 chk:22702 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23063 DF frag_off:0 ttl:251 proto:1 chk:22702 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55186 frag_off:0 ttl:64 proto:4 chk:25840 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55186 frag_off:0 ttl:64 proto:50 chk:25762 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:18 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55186 frag_off:0 ttl:64 proto:50 chk:25762 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:176 frag_off:0 ttl:120 proto:50 chk:901 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=176 (iv)=0x1e978572e39d6cd6 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:19 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:176 frag_off:0 ttl:120 proto:4 chk:979 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16213 frag_off:0 ttl:128 proto:1 chk:11889 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23064 DF frag_off:0 ttl:251 proto:1 chk:22701 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23064 DF frag_off:0 ttl:251 proto:1 chk:22701 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55187 frag_off:0 ttl:64 proto:4 chk:25839 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55187 frag_off:0 ttl:64 proto:50 chk:25761 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:19 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55187 frag_off:0 ttl:64 proto:50 chk:25761 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:177 frag_off:0 ttl:120 proto:50 chk:900 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=177 (iv)=0x145786a37a584bce iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:20 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:177 frag_off:0 ttl:120 proto:4 chk:978 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16214 frag_off:0 ttl:128 proto:1 chk:11888 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23065 DF frag_off:0 ttl:251 proto:1 chk:22700 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23065 DF frag_off:0 ttl:251 proto:1 chk:22700 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55188 frag_off:0 ttl:64 proto:4 chk:25838 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55188 frag_off:0 ttl:64 proto:50 chk:25760 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:20 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55188 frag_off:0 ttl:64 proto:50 chk:25760 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:178 frag_off:0 ttl:120 proto:50 chk:899 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=178 (iv)=0x50edd20acd2d0500 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:21 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:178 frag_off:0 ttl:120 proto:4 chk:977 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16220 frag_off:0 ttl:128 proto:1 chk:11882 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23066 DF frag_off:0 ttl:251 proto:1 chk:22699 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23066 DF frag_off:0 ttl:251 proto:1 chk:22699 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55189 frag_off:0 ttl:64 proto:4 chk:25837 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55189 frag_off:0 ttl:64 proto:50 chk:25759 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:21 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55189 frag_off:0 ttl:64 proto:50 chk:25759 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:179 frag_off:0 ttl:120 proto:50 chk:898 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=179 (iv)=0x843b653bfbf92130 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:22 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:179 frag_off:0 ttl:120 proto:4 chk:976 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16221 frag_off:0 ttl:128 proto:1 chk:11881 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23067 DF frag_off:0 ttl:251 proto:1 chk:22698 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23067 DF frag_off:0 ttl:251 proto:1 chk:22698 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55190 frag_off:0 ttl:64 proto:4 chk:25836 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55190 frag_off:0 ttl:64 proto:50 chk:25758 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:22 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55190 frag_off:0 ttl:64 proto:50 chk:25758 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:180 frag_off:0 ttl:120 proto:50 chk:897 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=180 (iv)=0xa395c7efb1a44079 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:23 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:180 frag_off:0 ttl:120 proto:4 chk:975 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16222 frag_off:0 ttl:128 proto:1 chk:11880 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23068 DF frag_off:0 ttl:251 proto:1 chk:22697 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23068 DF frag_off:0 ttl:251 proto:1 chk:22697 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55191 frag_off:0 ttl:64 proto:4 chk:25835 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55191 frag_off:0 ttl:64 proto:50 chk:25757 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:23 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55191 frag_off:0 ttl:64 proto:50 chk:25757 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:181 frag_off:0 ttl:120 proto:50 chk:896 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=181 (iv)=0x6966b74be8dcc9a8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:24 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:181 frag_off:0 ttl:120 proto:4 chk:974 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16223 frag_off:0 ttl:128 proto:1 chk:11879 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23069 DF frag_off:0 ttl:251 proto:1 chk:22696 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23069 DF frag_off:0 ttl:251 proto:1 chk:22696 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55192 frag_off:0 ttl:64 proto:4 chk:25834 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55192 frag_off:0 ttl:64 proto:50 chk:25756 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:24 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55192 frag_off:0 ttl:64 proto:50 chk:25756 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:182 frag_off:0 ttl:120 proto:50 chk:895 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=182 (iv)=0x53f6b9123e4d91a9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:25 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:182 frag_off:0 ttl:120 proto:4 chk:973 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16227 frag_off:0 ttl:128 proto:1 chk:11875 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23070 DF frag_off:0 ttl:251 proto:1 chk:22695 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23070 DF frag_off:0 ttl:251 proto:1 chk:22695 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55193 frag_off:0 ttl:64 proto:4 chk:25833 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55193 frag_off:0 ttl:64 proto:50 chk:25755 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:25 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55193 frag_off:0 ttl:64 proto:50 chk:25755 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:183 frag_off:0 ttl:120 proto:50 chk:894 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=183 (iv)=0xfe4b6d2865484be9 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:26 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:183 frag_off:0 ttl:120 proto:4 chk:972 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16233 frag_off:0 ttl:128 proto:1 chk:11869 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23071 DF frag_off:0 ttl:251 proto:1 chk:22694 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23071 DF frag_off:0 ttl:251 proto:1 chk:22694 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55194 frag_off:0 ttl:64 proto:4 chk:25832 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55194 frag_off:0 ttl:64 proto:50 chk:25754 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:26 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55194 frag_off:0 ttl:64 proto:50 chk:25754 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:184 frag_off:0 ttl:120 proto:50 chk:893 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=184 (iv)=0xbc6421e18609fa0e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:27 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:184 frag_off:0 ttl:120 proto:4 chk:971 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16238 frag_off:0 ttl:128 proto:1 chk:11864 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23072 DF frag_off:0 ttl:251 proto:1 chk:22693 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23072 DF frag_off:0 ttl:251 proto:1 chk:22693 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55195 frag_off:0 ttl:64 proto:4 chk:25831 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55195 frag_off:0 ttl:64 proto:50 chk:25753 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:27 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55195 frag_off:0 ttl:64 proto:50 chk:25753 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:185 frag_off:0 ttl:120 proto:50 chk:892 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=185 (iv)=0xea0a7e654298d5e8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:28 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:185 frag_off:0 ttl:120 proto:4 chk:970 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16241 frag_off:0 ttl:128 proto:1 chk:11861 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23073 DF frag_off:0 ttl:251 proto:1 chk:22692 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23073 DF frag_off:0 ttl:251 proto:1 chk:22692 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55196 frag_off:0 ttl:64 proto:4 chk:25830 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55196 frag_off:0 ttl:64 proto:50 chk:25752 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:28 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55196 frag_off:0 ttl:64 proto:50 chk:25752 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:186 frag_off:0 ttl:120 proto:50 chk:891 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=186 (iv)=0x0b928104930f6b51 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:29 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:186 frag_off:0 ttl:120 proto:4 chk:969 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16245 frag_off:0 ttl:128 proto:1 chk:11857 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23074 DF frag_off:0 ttl:251 proto:1 chk:22691 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23074 DF frag_off:0 ttl:251 proto:1 chk:22691 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55197 frag_off:0 ttl:64 proto:4 chk:25829 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55197 frag_off:0 ttl:64 proto:50 chk:25751 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:29 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55197 frag_off:0 ttl:64 proto:50 chk:25751 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:187 frag_off:0 ttl:120 proto:50 chk:890 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=187 (iv)=0xac9c1203219e1bf3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:30 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:187 frag_off:0 ttl:120 proto:4 chk:968 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16246 frag_off:0 ttl:128 proto:1 chk:11856 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23075 DF frag_off:0 ttl:251 proto:1 chk:22690 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23075 DF frag_off:0 ttl:251 proto:1 chk:22690 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55198 frag_off:0 ttl:64 proto:4 chk:25828 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55198 frag_off:0 ttl:64 proto:50 chk:25750 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:30 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55198 frag_off:0 ttl:64 proto:50 chk:25750 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:188 frag_off:0 ttl:120 proto:50 chk:889 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=188 (iv)=0x05dea953457030ed iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:31 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:188 frag_off:0 ttl:120 proto:4 chk:967 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16247 frag_off:0 ttl:128 proto:1 chk:11855 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23076 DF frag_off:0 ttl:251 proto:1 chk:22689 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23076 DF frag_off:0 ttl:251 proto:1 chk:22689 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55199 frag_off:0 ttl:64 proto:4 chk:25827 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55199 frag_off:0 ttl:64 proto:50 chk:25749 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:31 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55199 frag_off:0 ttl:64 proto:50 chk:25749 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:189 frag_off:0 ttl:120 proto:50 chk:888 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=189 (iv)=0x562423f60d146896 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:32 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:189 frag_off:0 ttl:120 proto:4 chk:966 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16248 frag_off:0 ttl:128 proto:1 chk:11854 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23077 DF frag_off:0 ttl:251 proto:1 chk:22688 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23077 DF frag_off:0 ttl:251 proto:1 chk:22688 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55200 frag_off:0 ttl:64 proto:4 chk:25826 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55200 frag_off:0 ttl:64 proto:50 chk:25748 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:32 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55200 frag_off:0 ttl:64 proto:50 chk:25748 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:190 frag_off:0 ttl:120 proto:50 chk:887 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=190 (iv)=0xc2ab7854164849c1 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:33 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:190 frag_off:0 ttl:120 proto:4 chk:965 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16252 frag_off:0 ttl:128 proto:1 chk:11850 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23078 DF frag_off:0 ttl:251 proto:1 chk:22687 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23078 DF frag_off:0 ttl:251 proto:1 chk:22687 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55201 frag_off:0 ttl:64 proto:4 chk:25825 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55201 frag_off:0 ttl:64 proto:50 chk:25747 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:33 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55201 frag_off:0 ttl:64 proto:50 chk:25747 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:191 frag_off:0 ttl:120 proto:50 chk:886 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=191 (iv)=0xe2c4de637574dc23 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:34 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:191 frag_off:0 ttl:120 proto:4 chk:964 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16260 frag_off:0 ttl:128 proto:1 chk:11842 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23079 DF frag_off:0 ttl:251 proto:1 chk:22686 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23079 DF frag_off:0 ttl:251 proto:1 chk:22686 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55202 frag_off:0 ttl:64 proto:4 chk:25824 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55202 frag_off:0 ttl:64 proto:50 chk:25746 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:34 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55202 frag_off:0 ttl:64 proto:50 chk:25746 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:192 frag_off:0 ttl:120 proto:50 chk:885 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=192 (iv)=0xa71dcaf28e2cd248 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:35 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:192 frag_off:0 ttl:120 proto:4 chk:963 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16261 frag_off:0 ttl:128 proto:1 chk:11841 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23080 DF frag_off:0 ttl:251 proto:1 chk:22685 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23080 DF frag_off:0 ttl:251 proto:1 chk:22685 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55203 frag_off:0 ttl:64 proto:4 chk:25823 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55203 frag_off:0 ttl:64 proto:50 chk:25745 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:35 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55203 frag_off:0 ttl:64 proto:50 chk:25745 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:193 frag_off:0 ttl:120 proto:50 chk:884 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=193 (iv)=0x2e6c8634db400be3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:36 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:193 frag_off:0 ttl:120 proto:4 chk:962 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16265 frag_off:0 ttl:128 proto:1 chk:11837 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23081 DF frag_off:0 ttl:251 proto:1 chk:22684 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23081 DF frag_off:0 ttl:251 proto:1 chk:22684 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55204 frag_off:0 ttl:64 proto:4 chk:25822 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55204 frag_off:0 ttl:64 proto:50 chk:25744 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:36 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55204 frag_off:0 ttl:64 proto:50 chk:25744 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:194 frag_off:0 ttl:120 proto:50 chk:883 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=194 (iv)=0x55bc4835af3bb097 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:37 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:194 frag_off:0 ttl:120 proto:4 chk:961 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16271 frag_off:0 ttl:128 proto:1 chk:11831 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23082 DF frag_off:0 ttl:251 proto:1 chk:22683 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23082 DF frag_off:0 ttl:251 proto:1 chk:22683 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55205 frag_off:0 ttl:64 proto:4 chk:25821 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55205 frag_off:0 ttl:64 proto:50 chk:25743 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:37 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55205 frag_off:0 ttl:64 proto:50 chk:25743 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:195 frag_off:0 ttl:120 proto:50 chk:882 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=195 (iv)=0xf052c162f996cd96 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:38 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:195 frag_off:0 ttl:120 proto:4 chk:960 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16272 frag_off:0 ttl:128 proto:1 chk:11830 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23083 DF frag_off:0 ttl:251 proto:1 chk:22682 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23083 DF frag_off:0 ttl:251 proto:1 chk:22682 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55206 frag_off:0 ttl:64 proto:4 chk:25820 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55206 frag_off:0 ttl:64 proto:50 chk:25742 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:38 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55206 frag_off:0 ttl:64 proto:50 chk:25742 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:196 frag_off:0 ttl:120 proto:50 chk:881 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=196 (iv)=0x7d9af3453cc4718f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:39 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:196 frag_off:0 ttl:120 proto:4 chk:959 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16273 frag_off:0 ttl:128 proto:1 chk:11829 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23084 DF frag_off:0 ttl:251 proto:1 chk:22681 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23084 DF frag_off:0 ttl:251 proto:1 chk:22681 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55207 frag_off:0 ttl:64 proto:4 chk:25819 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55207 frag_off:0 ttl:64 proto:50 chk:25741 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:39 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55207 frag_off:0 ttl:64 proto:50 chk:25741 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:197 frag_off:0 ttl:120 proto:50 chk:880 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=197 (iv)=0x9ea1396b44bb598f iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:40 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:197 frag_off:0 ttl:120 proto:4 chk:958 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16274 frag_off:0 ttl:128 proto:1 chk:11828 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23085 DF frag_off:0 ttl:251 proto:1 chk:22680 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23085 DF frag_off:0 ttl:251 proto:1 chk:22680 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55208 frag_off:0 ttl:64 proto:4 chk:25818 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55208 frag_off:0 ttl:64 proto:50 chk:25740 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:40 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55208 frag_off:0 ttl:64 proto:50 chk:25740 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:198 frag_off:0 ttl:120 proto:50 chk:879 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=198 (iv)=0x6ebe8e15bf46a977 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:41 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:198 frag_off:0 ttl:120 proto:4 chk:957 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16275 frag_off:0 ttl:128 proto:1 chk:11827 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23086 DF frag_off:0 ttl:251 proto:1 chk:22679 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23086 DF frag_off:0 ttl:251 proto:1 chk:22679 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55209 frag_off:0 ttl:64 proto:4 chk:25817 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55209 frag_off:0 ttl:64 proto:50 chk:25739 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:41 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55209 frag_off:0 ttl:64 proto:50 chk:25739 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:199 frag_off:0 ttl:120 proto:50 chk:878 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=199 (iv)=0x9899b8992ec31092 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:42 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:199 frag_off:0 ttl:120 proto:4 chk:956 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16276 frag_off:0 ttl:128 proto:1 chk:11826 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23087 DF frag_off:0 ttl:251 proto:1 chk:22678 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23087 DF frag_off:0 ttl:251 proto:1 chk:22678 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55210 frag_off:0 ttl:64 proto:4 chk:25816 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55210 frag_off:0 ttl:64 proto:50 chk:25738 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:42 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55210 frag_off:0 ttl:64 proto:50 chk:25738 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:200 frag_off:0 ttl:120 proto:50 chk:877 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=200 (iv)=0xc07e5ddd38df2f8d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:43 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:200 frag_off:0 ttl:120 proto:4 chk:955 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16277 frag_off:0 ttl:128 proto:1 chk:11825 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23088 DF frag_off:0 ttl:251 proto:1 chk:22677 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23088 DF frag_off:0 ttl:251 proto:1 chk:22677 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55211 frag_off:0 ttl:64 proto:4 chk:25815 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55211 frag_off:0 ttl:64 proto:50 chk:25737 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:43 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55211 frag_off:0 ttl:64 proto:50 chk:25737 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:201 frag_off:0 ttl:120 proto:50 chk:876 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=201 (iv)=0x99fe302a575885c7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:44 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:201 frag_off:0 ttl:120 proto:4 chk:954 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16278 frag_off:0 ttl:128 proto:1 chk:11824 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23089 DF frag_off:0 ttl:251 proto:1 chk:22676 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23089 DF frag_off:0 ttl:251 proto:1 chk:22676 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55212 frag_off:0 ttl:64 proto:4 chk:25814 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55212 frag_off:0 ttl:64 proto:50 chk:25736 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:44 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55212 frag_off:0 ttl:64 proto:50 chk:25736 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:202 frag_off:0 ttl:120 proto:50 chk:875 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=202 (iv)=0xb3e90e3b126b5073 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:45 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:202 frag_off:0 ttl:120 proto:4 chk:953 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16279 frag_off:0 ttl:128 proto:1 chk:11823 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23090 DF frag_off:0 ttl:251 proto:1 chk:22675 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23090 DF frag_off:0 ttl:251 proto:1 chk:22675 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55213 frag_off:0 ttl:64 proto:4 chk:25813 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55213 frag_off:0 ttl:64 proto:50 chk:25735 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:45 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55213 frag_off:0 ttl:64 proto:50 chk:25735 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:203 frag_off:0 ttl:120 proto:50 chk:874 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=203 (iv)=0xce179dd8770f91bc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:46 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:203 frag_off:0 ttl:120 proto:4 chk:952 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16280 frag_off:0 ttl:128 proto:1 chk:11822 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23091 DF frag_off:0 ttl:251 proto:1 chk:22674 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23091 DF frag_off:0 ttl:251 proto:1 chk:22674 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55214 frag_off:0 ttl:64 proto:4 chk:25812 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55214 frag_off:0 ttl:64 proto:50 chk:25734 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:46 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55214 frag_off:0 ttl:64 proto:50 chk:25734 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:204 frag_off:0 ttl:120 proto:50 chk:873 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=204 (iv)=0x1f167d49f28ae053 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:47 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:204 frag_off:0 ttl:120 proto:4 chk:951 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16281 frag_off:0 ttl:128 proto:1 chk:11821 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23092 DF frag_off:0 ttl:251 proto:1 chk:22673 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23092 DF frag_off:0 ttl:251 proto:1 chk:22673 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55215 frag_off:0 ttl:64 proto:4 chk:25811 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55215 frag_off:0 ttl:64 proto:50 chk:25733 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:47 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55215 frag_off:0 ttl:64 proto:50 chk:25733 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:205 frag_off:0 ttl:120 proto:50 chk:872 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=205 (iv)=0x0dd89c2f4992a926 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:48 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:205 frag_off:0 ttl:120 proto:4 chk:950 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16282 frag_off:0 ttl:128 proto:1 chk:11820 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23093 DF frag_off:0 ttl:251 proto:1 chk:22672 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23093 DF frag_off:0 ttl:251 proto:1 chk:22672 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55216 frag_off:0 ttl:64 proto:4 chk:25810 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55216 frag_off:0 ttl:64 proto:50 chk:25732 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:48 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55216 frag_off:0 ttl:64 proto:50 chk:25732 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:206 frag_off:0 ttl:120 proto:50 chk:871 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=206 (iv)=0xf029d10eed8a8e51 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:49 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:206 frag_off:0 ttl:120 proto:4 chk:949 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16283 frag_off:0 ttl:128 proto:1 chk:11819 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23094 DF frag_off:0 ttl:251 proto:1 chk:22671 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23094 DF frag_off:0 ttl:251 proto:1 chk:22671 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55217 frag_off:0 ttl:64 proto:4 chk:25809 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55217 frag_off:0 ttl:64 proto:50 chk:25731 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:49 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55217 frag_off:0 ttl:64 proto:50 chk:25731 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:207 frag_off:0 ttl:120 proto:50 chk:870 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=207 (iv)=0xdcd0ac4d41a0d81c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:50 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:207 frag_off:0 ttl:120 proto:4 chk:948 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16284 frag_off:0 ttl:128 proto:1 chk:11818 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23095 DF frag_off:0 ttl:251 proto:1 chk:22670 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23095 DF frag_off:0 ttl:251 proto:1 chk:22670 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55218 frag_off:0 ttl:64 proto:4 chk:25808 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55218 frag_off:0 ttl:64 proto:50 chk:25730 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:50 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55218 frag_off:0 ttl:64 proto:50 chk:25730 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:208 frag_off:0 ttl:120 proto:50 chk:869 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=208 (iv)=0xd0332871e24fc279 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:51 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:208 frag_off:0 ttl:120 proto:4 chk:947 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16285 frag_off:0 ttl:128 proto:1 chk:11817 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23096 DF frag_off:0 ttl:251 proto:1 chk:22669 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23096 DF frag_off:0 ttl:251 proto:1 chk:22669 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55219 frag_off:0 ttl:64 proto:4 chk:25807 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55219 frag_off:0 ttl:64 proto:50 chk:25729 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:51 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55219 frag_off:0 ttl:64 proto:50 chk:25729 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:209 frag_off:0 ttl:120 proto:50 chk:868 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=209 (iv)=0x70bb747d22955d32 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:52 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:209 frag_off:0 ttl:120 proto:4 chk:946 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16286 frag_off:0 ttl:128 proto:1 chk:11816 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23097 DF frag_off:0 ttl:251 proto:1 chk:22668 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23097 DF frag_off:0 ttl:251 proto:1 chk:22668 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55220 frag_off:0 ttl:64 proto:4 chk:25806 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55220 frag_off:0 ttl:64 proto:50 chk:25728 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:52 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55220 frag_off:0 ttl:64 proto:50 chk:25728 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:210 frag_off:0 ttl:120 proto:50 chk:867 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=210 (iv)=0xbc51bdf20b48dfc5 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:53 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:210 frag_off:0 ttl:120 proto:4 chk:945 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16287 frag_off:0 ttl:128 proto:1 chk:11815 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23098 DF frag_off:0 ttl:251 proto:1 chk:22667 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23098 DF frag_off:0 ttl:251 proto:1 chk:22667 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55221 frag_off:0 ttl:64 proto:4 chk:25805 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55221 frag_off:0 ttl:64 proto:50 chk:25727 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:53 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:53 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55221 frag_off:0 ttl:64 proto:50 chk:25727 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:211 frag_off:0 ttl:120 proto:50 chk:866 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=211 (iv)=0x99b3d877531992dc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:54 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:211 frag_off:0 ttl:120 proto:4 chk:944 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16292 frag_off:0 ttl:128 proto:1 chk:11810 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23099 DF frag_off:0 ttl:251 proto:1 chk:22666 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:54 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23099 DF frag_off:0 ttl:251 proto:1 chk:22666 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55222 frag_off:0 ttl:64 proto:4 chk:25804 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55222 frag_off:0 ttl:64 proto:50 chk:25726 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:54 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:54 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:54 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55222 frag_off:0 ttl:64 proto:50 chk:25726 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:212 frag_off:0 ttl:120 proto:50 chk:865 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=212 (iv)=0x1c10b19360e228ca iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:55 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:212 frag_off:0 ttl:120 proto:4 chk:943 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16299 frag_off:0 ttl:128 proto:1 chk:11803 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23100 DF frag_off:0 ttl:251 proto:1 chk:22665 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:55 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23100 DF frag_off:0 ttl:251 proto:1 chk:22665 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55223 frag_off:0 ttl:64 proto:4 chk:25803 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55223 frag_off:0 ttl:64 proto:50 chk:25725 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:55 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:55 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:55 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55223 frag_off:0 ttl:64 proto:50 chk:25725 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:213 frag_off:0 ttl:120 proto:50 chk:864 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=213 (iv)=0xab4ee9e9ee50d390 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:56 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:213 frag_off:0 ttl:120 proto:4 chk:942 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16300 frag_off:0 ttl:128 proto:1 chk:11802 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23101 DF frag_off:0 ttl:251 proto:1 chk:22664 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:56 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23101 DF frag_off:0 ttl:251 proto:1 chk:22664 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55224 frag_off:0 ttl:64 proto:4 chk:25802 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55224 frag_off:0 ttl:64 proto:50 chk:25724 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:56 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:56 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:56 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55224 frag_off:0 ttl:64 proto:50 chk:25724 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:214 frag_off:0 ttl:120 proto:50 chk:863 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=214 (iv)=0x5ddef7378d3f71cc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:57 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:214 frag_off:0 ttl:120 proto:4 chk:941 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16335 frag_off:0 ttl:128 proto:1 chk:11767 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23102 DF frag_off:0 ttl:251 proto:1 chk:22663 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:57 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23102 DF frag_off:0 ttl:251 proto:1 chk:22663 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55225 frag_off:0 ttl:64 proto:4 chk:25801 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55225 frag_off:0 ttl:64 proto:50 chk:25723 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:57 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:57 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:57 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55225 frag_off:0 ttl:64 proto:50 chk:25723 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:215 frag_off:0 ttl:120 proto:50 chk:862 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=215 (iv)=0x873e5593aaf01010 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:58 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:215 frag_off:0 ttl:120 proto:4 chk:940 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16390 frag_off:0 ttl:128 proto:1 chk:11712 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23103 DF frag_off:0 ttl:251 proto:1 chk:22662 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:58 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23103 DF frag_off:0 ttl:251 proto:1 chk:22662 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55226 frag_off:0 ttl:64 proto:4 chk:25800 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55226 frag_off:0 ttl:64 proto:50 chk:25722 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:58 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:58 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:58 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55226 frag_off:0 ttl:64 proto:50 chk:25722 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:216 frag_off:0 ttl:120 proto:50 chk:861 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=216 (iv)=0x4693d7d92d1a4598 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:10:59 outside kernel: klips_debug:           00: 01 02
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:216 frag_off:0 ttl:120 proto:4 chk:939 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16438 frag_off:0 ttl:128 proto:1 chk:11664 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23104 DF frag_off:0 ttl:251 proto:1 chk:22661 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:10:59 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23104 DF frag_off:0 ttl:251 proto:1 chk:22661 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55227 frag_off:0 ttl:64 proto:4 chk:25799 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55227 frag_off:0 ttl:64 proto:50 chk:25721 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:10:59 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:10:59 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:10:59 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55227 frag_off:0 ttl:64 proto:50 chk:25721 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:217 frag_off:0 ttl:120 proto:50 chk:860 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=217 (iv)=0x65fd0f5418d52fcf iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:00 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:217 frag_off:0 ttl:120 proto:4 chk:938 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16444 frag_off:0 ttl:128 proto:1 chk:11658 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23105 DF frag_off:0 ttl:251 proto:1 chk:22660 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:00 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23105 DF frag_off:0 ttl:251 proto:1 chk:22660 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55228 frag_off:0 ttl:64 proto:4 chk:25798 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55228 frag_off:0 ttl:64 proto:50 chk:25720 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:00 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:00 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:00 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55228 frag_off:0 ttl:64 proto:50 chk:25720 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:218 frag_off:0 ttl:120 proto:50 chk:859 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=218 (iv)=0x51a2369bed8d2391 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:01 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:218 frag_off:0 ttl:120 proto:4 chk:937 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16445 frag_off:0 ttl:128 proto:1 chk:11657 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23106 DF frag_off:0 ttl:251 proto:1 chk:22659 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:01 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23106 DF frag_off:0 ttl:251 proto:1 chk:22659 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55229 frag_off:0 ttl:64 proto:4 chk:25797 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55229 frag_off:0 ttl:64 proto:50 chk:25719 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:01 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:01 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:01 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55229 frag_off:0 ttl:64 proto:50 chk:25719 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:219 frag_off:0 ttl:120 proto:50 chk:858 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=219 (iv)=0x591eeef9890f97ab iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:02 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:219 frag_off:0 ttl:120 proto:4 chk:936 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16446 frag_off:0 ttl:128 proto:1 chk:11656 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23107 DF frag_off:0 ttl:251 proto:1 chk:22658 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:02 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23107 DF frag_off:0 ttl:251 proto:1 chk:22658 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55230 frag_off:0 ttl:64 proto:4 chk:25796 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55230 frag_off:0 ttl:64 proto:50 chk:25718 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:02 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:02 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:02 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55230 frag_off:0 ttl:64 proto:50 chk:25718 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:220 frag_off:0 ttl:120 proto:50 chk:857 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=220 (iv)=0x9941ce570b9fed77 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:03 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:220 frag_off:0 ttl:120 proto:4 chk:935 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16447 frag_off:0 ttl:128 proto:1 chk:11655 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23108 DF frag_off:0 ttl:251 proto:1 chk:22657 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:03 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23108 DF frag_off:0 ttl:251 proto:1 chk:22657 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55231 frag_off:0 ttl:64 proto:4 chk:25795 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55231 frag_off:0 ttl:64 proto:50 chk:25717 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:03 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:03 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:03 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55231 frag_off:0 ttl:64 proto:50 chk:25717 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:221 frag_off:0 ttl:120 proto:50 chk:856 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=221 (iv)=0x8a895e6a944f4494 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:04 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:221 frag_off:0 ttl:120 proto:4 chk:934 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16448 frag_off:0 ttl:128 proto:1 chk:11654 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23109 DF frag_off:0 ttl:251 proto:1 chk:22656 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:04 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23109 DF frag_off:0 ttl:251 proto:1 chk:22656 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55232 frag_off:0 ttl:64 proto:4 chk:25794 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55232 frag_off:0 ttl:64 proto:50 chk:25716 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:04 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:04 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:04 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55232 frag_off:0 ttl:64 proto:50 chk:25716 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:222 frag_off:0 ttl:120 proto:50 chk:855 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=222 (iv)=0x1bb611a8586e9fa6 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:05 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:222 frag_off:0 ttl:120 proto:4 chk:933 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16449 frag_off:0 ttl:128 proto:1 chk:11653 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23110 DF frag_off:0 ttl:251 proto:1 chk:22655 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:05 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23110 DF frag_off:0 ttl:251 proto:1 chk:22655 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55233 frag_off:0 ttl:64 proto:4 chk:25793 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55233 frag_off:0 ttl:64 proto:50 chk:25715 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:05 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:05 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:05 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55233 frag_off:0 ttl:64 proto:50 chk:25715 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:223 frag_off:0 ttl:120 proto:50 chk:854 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=223 (iv)=0xce8188be51bb6380 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:06 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:223 frag_off:0 ttl:120 proto:4 chk:932 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16450 frag_off:0 ttl:128 proto:1 chk:11652 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23111 DF frag_off:0 ttl:251 proto:1 chk:22654 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:06 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23111 DF frag_off:0 ttl:251 proto:1 chk:22654 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55234 frag_off:0 ttl:64 proto:4 chk:25792 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55234 frag_off:0 ttl:64 proto:50 chk:25714 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:06 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:06 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:06 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55234 frag_off:0 ttl:64 proto:50 chk:25714 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:224 frag_off:0 ttl:120 proto:50 chk:853 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=224 (iv)=0xfd95a8a6b46a8361 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:07 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:224 frag_off:0 ttl:120 proto:4 chk:931 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16451 frag_off:0 ttl:128 proto:1 chk:11651 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23112 DF frag_off:0 ttl:251 proto:1 chk:22653 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:07 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23112 DF frag_off:0 ttl:251 proto:1 chk:22653 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55235 frag_off:0 ttl:64 proto:4 chk:25791 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55235 frag_off:0 ttl:64 proto:50 chk:25713 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:07 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:07 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:07 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55235 frag_off:0 ttl:64 proto:50 chk:25713 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:225 frag_off:0 ttl:120 proto:50 chk:852 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=225 (iv)=0x49aa5def555b40c8 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:08 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:225 frag_off:0 ttl:120 proto:4 chk:930 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16452 frag_off:0 ttl:128 proto:1 chk:11650 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23113 DF frag_off:0 ttl:251 proto:1 chk:22652 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:08 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23113 DF frag_off:0 ttl:251 proto:1 chk:22652 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55236 frag_off:0 ttl:64 proto:4 chk:25790 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55236 frag_off:0 ttl:64 proto:50 chk:25712 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:08 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:08 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:08 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55236 frag_off:0 ttl:64 proto:50 chk:25712 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:226 frag_off:0 ttl:120 proto:50 chk:851 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=226 (iv)=0x33ee955c0c28b9d6 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:09 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:226 frag_off:0 ttl:120 proto:4 chk:929 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16453 frag_off:0 ttl:128 proto:1 chk:11649 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23114 DF frag_off:0 ttl:251 proto:1 chk:22651 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:09 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23114 DF frag_off:0 ttl:251 proto:1 chk:22651 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55237 frag_off:0 ttl:64 proto:4 chk:25789 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55237 frag_off:0 ttl:64 proto:50 chk:25711 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:09 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:09 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:09 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55237 frag_off:0 ttl:64 proto:50 chk:25711 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:227 frag_off:0 ttl:120 proto:50 chk:850 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=227 (iv)=0xdbf19bd6bceb6d8a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:10 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:227 frag_off:0 ttl:120 proto:4 chk:928 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16454 frag_off:0 ttl:128 proto:1 chk:11648 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23115 DF frag_off:0 ttl:251 proto:1 chk:22650 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:10 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23115 DF frag_off:0 ttl:251 proto:1 chk:22650 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55238 frag_off:0 ttl:64 proto:4 chk:25788 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55238 frag_off:0 ttl:64 proto:50 chk:25710 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:10 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:10 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:10 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55238 frag_off:0 ttl:64 proto:50 chk:25710 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:228 frag_off:0 ttl:120 proto:50 chk:849 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=228 (iv)=0xda71db6fa3039387 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:11 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:228 frag_off:0 ttl:120 proto:4 chk:927 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16462 frag_off:0 ttl:128 proto:1 chk:11640 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23116 DF frag_off:0 ttl:251 proto:1 chk:22649 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:11 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23116 DF frag_off:0 ttl:251 proto:1 chk:22649 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55239 frag_off:0 ttl:64 proto:4 chk:25787 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55239 frag_off:0 ttl:64 proto:50 chk:25709 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:11 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:11 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:11 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55239 frag_off:0 ttl:64 proto:50 chk:25709 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:229 frag_off:0 ttl:120 proto:50 chk:848 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=229 (iv)=0x8720b77848198630 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:12 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:229 frag_off:0 ttl:120 proto:4 chk:926 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16471 frag_off:0 ttl:128 proto:1 chk:11631 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23117 DF frag_off:0 ttl:251 proto:1 chk:22648 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:12 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23117 DF frag_off:0 ttl:251 proto:1 chk:22648 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55240 frag_off:0 ttl:64 proto:4 chk:25786 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55240 frag_off:0 ttl:64 proto:50 chk:25708 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:12 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:12 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55240 frag_off:0 ttl:64 proto:50 chk:25708 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_spigrp_get_info: buffer=0xcbac3000, *start=0x0, offset=0, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_spigrp_get_info: buffer=0xcbac3000, *start=0x0, offset=98, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:@@ flags = 6 @key = c15b4720 key = 00000000->00000000 @mask = 00000000
Jun 23 07:11:12 outside kernel: klips_debug:@@ flags = 4 @key = ced86330 key = 0a010000->c0a8020b @mask = c144d650 mask = ffff0000->ffffffff
Jun 23 07:11:12 outside kernel: klips_debug:* off = 0
Jun 23 07:11:12 outside kernel: klips_debug:@ flags = 6 @key = c15b472c key = ffffffff->ffffffff @mask = 00000000
Jun 23 07:11:12 outside kernel: klips_debug: off = 0
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_eroute_get_info: buffer=0xcbac3000, *start=0x0, offset=0, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=cbc01f18
Jun 23 07:11:12 outside kernel: klips_debug:@@ flags = 6 @key = c15b4720 key = 00000000->00000000 @mask = 00000000
Jun 23 07:11:12 outside kernel: klips_debug:@@ flags = 4 @key = ced86330 key = 0a010000->c0a8020b @mask = c144d650 mask = ffff0000->ffffffff
Jun 23 07:11:12 outside kernel: klips_debug:* off = 0
Jun 23 07:11:12 outside kernel: klips_debug:@ flags = 6 @key = c15b472c key = ffffffff->ffffffff @mask = 00000000
Jun 23 07:11:12 outside kernel: klips_debug: off = 0
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_eroute_get_info: buffer=0xcbb7c000, *start=0x0, offset=78, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:11:12 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=cbc01f18
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tncfg_get_info: buffer=0xcbb3b000, *start=0x0, offset=0, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_tncfg_get_info: buffer=0xcbad0000, *start=0x0, offset=126, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_spi_get_info: buffer=0xcbb91000, *start=0x0, offset=0, length=3072
Jun 23 07:11:12 outside kernel: klips_debug:ipsec_spi_get_info: buffer=0xcbb91000, *start=0x0, offset=737, length=3072
Jun 23 07:11:13 outside kernel: klips_debug:@@ flags = 6 @key = c15b4720 key = 00000000->00000000 @mask = 00000000
Jun 23 07:11:13 outside kernel: klips_debug:@@ flags = 4 @key = ced86330<6>klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:230 frag_off:0 ttl:120 proto:50 chk:847 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=230 (iv)=0x60cbb03799f9a2d2 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:14 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:230 frag_off:0 ttl:120 proto:4 chk:925 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16475 frag_off:0 ttl:128 proto:1 chk:11627 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:14 outside kernel:  key = 0a010000->c0a8020b @mask = c144d650<6>klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0. mask = ffff0000->ffffffff<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f 
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0klips_debug::81*:01 off = 0
Jun 23 07:11:14 outside kernel: :8fklips_debug::0f@:00 flags = 6:e0 @key = c15b472c:81 key = ffffffff->ffffffff:01 @mask = 00000000:8f
Jun 23 07:11:14 outside kernel: :0fklips_debug::08 off = 0
Jun 23 07:11:14 outside kernel: :00<6>klips_debug:ipsec_eroute_get_info: buffer=0xcbae5000, *start=0x0, offset=0, length=3072
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6<6>klips_debug:   IP: leaf key = 00000000->00000000
Jun 23 07:11:14 outside kernel:  ihl:20klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 ver:4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel:  tos:0klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 tlen:60 leaf key = 00000000->00000000
Jun 23 07:11:14 outside kernel:  id:23118klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 DF frag_off:0 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel:  ttl:251klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 proto:1 leaf key = ffffffff->ffffffff
Jun 23 07:11:14 outside kernel:  chk:22647klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 saddr:10.1.0.71 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel:  daddr:192.168.2.11<6>klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=c629ff18
Jun 23 07:11:14 outside kernel: klips_debug:<6>klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:14 outside kernel: @<6>klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:14 outside kernel: @<6>klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:14 outside kernel:  flags = 6<6>klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:14 outside kernel:  @key = c15b4720<6>klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:14 outside kernel:  key = 00000000->00000000<6>klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:14 outside kernel:  @mask = 00000000<6>klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:14 outside kernel: klips_debug:<6>klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:14 outside kernel: @<6>klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:14 outside kernel: @<6>klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:14 outside kernel:  flags = 4<6>klips_debug:   IP: @key = ced86330 ihl:20 key = 0a010000->c0a8020b ver:4 @mask = c144d650 tos:0 mask = ffff0000->ffffffff tlen:60
Jun 23 07:11:14 outside kernel:  id:23118klips_debug: DF frag_off:0* ttl:251 off = 0
Jun 23 07:11:14 outside kernel:  proto:1klips_debug: chk:22647@ saddr:10.1.0.71 flags = 6 daddr:192.168.2.11 @key = c15b472c
Jun 23 07:11:14 outside kernel:  key = ffffffff->ffffffff<6>klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:14 outside kernel:  @mask = 00000000<6>klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:14 outside kernel: klips_debug:<6>klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55241 frag_off:0 ttl:64 proto:4 chk:25785 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_eroute_get_info: buffer=0xcbae5000, *start=0x0, offset=78, length=3072
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: for: rn=c15506c8 rj_b=-3 rj_flags=6<6>klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55241 frag_off:0 ttl:64 proto:50 chk:25707 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: processing leaves, rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=c15506c8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: for: rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: processing leaves, rn=c15506f8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff
Jun 23 07:11:14 outside kernel: klips_debug:rj_walktree: while: base=00000000 rn=ced862e0 rj_b=-1 rj_flags=4 leaf key = 0a010000->c0a8020b
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rj_walker_procprint: rn=ced862e0, w0=c629ff18
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55241 frag_off:0 ttl:64 proto:50 chk:25707 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:231 frag_off:0 ttl:120 proto:50 chk:846 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=231 (iv)=0xf358bb4ef6618970 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:14 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:231 frag_off:0 ttl:120 proto:4 chk:924 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16476 frag_off:0 ttl:128 proto:1 chk:11626 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23119 DF frag_off:0 ttl:251 proto:1 chk:22646 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:14 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23119 DF frag_off:0 ttl:251 proto:1 chk:22646 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55242 frag_off:0 ttl:64 proto:4 chk:25784 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55242 frag_off:0 ttl:64 proto:50 chk:25706 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:14 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:14 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:14 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55242 frag_off:0 ttl:64 proto:50 chk:25706 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:232 frag_off:0 ttl:120 proto:50 chk:845 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=232 (iv)=0xde9c6aa2af0c0b5b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:15 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:232 frag_off:0 ttl:120 proto:4 chk:923 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16477 frag_off:0 ttl:128 proto:1 chk:11625 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23120 DF frag_off:0 ttl:251 proto:1 chk:22645 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:15 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23120 DF frag_off:0 ttl:251 proto:1 chk:22645 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55243 frag_off:0 ttl:64 proto:4 chk:25783 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55243 frag_off:0 ttl:64 proto:50 chk:25705 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:15 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:15 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:15 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55243 frag_off:0 ttl:64 proto:50 chk:25705 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:233 frag_off:0 ttl:120 proto:50 chk:844 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=233 (iv)=0xfc24611f02fe1a13 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:16 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:233 frag_off:0 ttl:120 proto:4 chk:922 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16478 frag_off:0 ttl:128 proto:1 chk:11624 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23121 DF frag_off:0 ttl:251 proto:1 chk:22644 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:16 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23121 DF frag_off:0 ttl:251 proto:1 chk:22644 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55244 frag_off:0 ttl:64 proto:4 chk:25782 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55244 frag_off:0 ttl:64 proto:50 chk:25704 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:16 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:16 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:16 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55244 frag_off:0 ttl:64 proto:50 chk:25704 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:234 frag_off:0 ttl:120 proto:50 chk:843 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=234 (iv)=0x000d45b4a1d2d807 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:17 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:234 frag_off:0 ttl:120 proto:4 chk:921 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16479 frag_off:0 ttl:128 proto:1 chk:11623 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23122 DF frag_off:0 ttl:251 proto:1 chk:22643 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:17 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23122 DF frag_off:0 ttl:251 proto:1 chk:22643 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55245 frag_off:0 ttl:64 proto:4 chk:25781 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55245 frag_off:0 ttl:64 proto:50 chk:25703 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:17 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:17 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:17 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55245 frag_off:0 ttl:64 proto:50 chk:25703 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:235 frag_off:0 ttl:120 proto:50 chk:842 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=235 (iv)=0xb68739fc2773bc2e iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:18 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:235 frag_off:0 ttl:120 proto:4 chk:920 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16480 frag_off:0 ttl:128 proto:1 chk:11622 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23123 DF frag_off:0 ttl:251 proto:1 chk:22642 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:18 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23123 DF frag_off:0 ttl:251 proto:1 chk:22642 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55246 frag_off:0 ttl:64 proto:4 chk:25780 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55246 frag_off:0 ttl:64 proto:50 chk:25702 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:18 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:18 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:18 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55246 frag_off:0 ttl:64 proto:50 chk:25702 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:236 frag_off:0 ttl:120 proto:50 chk:841 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=236 (iv)=0xc5b55133f2d75571 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:19 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:236 frag_off:0 ttl:120 proto:4 chk:919 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16481 frag_off:0 ttl:128 proto:1 chk:11621 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23124 DF frag_off:0 ttl:251 proto:1 chk:22641 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:19 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23124 DF frag_off:0 ttl:251 proto:1 chk:22641 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55247 frag_off:0 ttl:64 proto:4 chk:25779 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55247 frag_off:0 ttl:64 proto:50 chk:25701 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:19 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:19 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:19 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55247 frag_off:0 ttl:64 proto:50 chk:25701 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:237 frag_off:0 ttl:120 proto:50 chk:840 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=237 (iv)=0x49b0361aecd43a18 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:20 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:237 frag_off:0 ttl:120 proto:4 chk:918 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16482 frag_off:0 ttl:128 proto:1 chk:11620 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23125 DF frag_off:0 ttl:251 proto:1 chk:22640 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:20 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23125 DF frag_off:0 ttl:251 proto:1 chk:22640 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55248 frag_off:0 ttl:64 proto:4 chk:25778 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55248 frag_off:0 ttl:64 proto:50 chk:25700 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:20 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:20 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:20 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55248 frag_off:0 ttl:64 proto:50 chk:25700 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:238 frag_off:0 ttl:120 proto:50 chk:839 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=238 (iv)=0xd28dd32cfba2686b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:21 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:238 frag_off:0 ttl:120 proto:4 chk:917 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16483 frag_off:0 ttl:128 proto:1 chk:11619 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23126 DF frag_off:0 ttl:251 proto:1 chk:22639 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:21 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23126 DF frag_off:0 ttl:251 proto:1 chk:22639 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55249 frag_off:0 ttl:64 proto:4 chk:25777 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55249 frag_off:0 ttl:64 proto:50 chk:25699 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:21 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:21 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:21 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55249 frag_off:0 ttl:64 proto:50 chk:25699 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:239 frag_off:0 ttl:120 proto:50 chk:838 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=239 (iv)=0x59b54823c773e62b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:22 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:239 frag_off:0 ttl:120 proto:4 chk:916 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16484 frag_off:0 ttl:128 proto:1 chk:11618 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23127 DF frag_off:0 ttl:251 proto:1 chk:22638 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:22 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23127 DF frag_off:0 ttl:251 proto:1 chk:22638 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55250 frag_off:0 ttl:64 proto:4 chk:25776 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55250 frag_off:0 ttl:64 proto:50 chk:25698 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:22 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:22 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:22 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55250 frag_off:0 ttl:64 proto:50 chk:25698 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:240 frag_off:0 ttl:120 proto:50 chk:837 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=240 (iv)=0x41302ea7f018425d iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:23 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:240 frag_off:0 ttl:120 proto:4 chk:915 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16485 frag_off:0 ttl:128 proto:1 chk:11617 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23128 DF frag_off:0 ttl:251 proto:1 chk:22637 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:23 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23128 DF frag_off:0 ttl:251 proto:1 chk:22637 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55251 frag_off:0 ttl:64 proto:4 chk:25775 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55251 frag_off:0 ttl:64 proto:50 chk:25697 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:23 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:23 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:23 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55251 frag_off:0 ttl:64 proto:50 chk:25697 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:241 frag_off:0 ttl:120 proto:50 chk:836 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=241 (iv)=0x1bcb35bf4f28c0d7 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:24 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:241 frag_off:0 ttl:120 proto:4 chk:914 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16486 frag_off:0 ttl:128 proto:1 chk:11616 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23129 DF frag_off:0 ttl:251 proto:1 chk:22636 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:24 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23129 DF frag_off:0 ttl:251 proto:1 chk:22636 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55252 frag_off:0 ttl:64 proto:4 chk:25774 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55252 frag_off:0 ttl:64 proto:50 chk:25696 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:24 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:24 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:24 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55252 frag_off:0 ttl:64 proto:50 chk:25696 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:242 frag_off:0 ttl:120 proto:50 chk:835 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=242 (iv)=0x9df5572326335a7c iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:25 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:242 frag_off:0 ttl:120 proto:4 chk:913 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16487 frag_off:0 ttl:128 proto:1 chk:11615 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23130 DF frag_off:0 ttl:251 proto:1 chk:22635 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:25 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23130 DF frag_off:0 ttl:251 proto:1 chk:22635 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55253 frag_off:0 ttl:64 proto:4 chk:25773 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55253 frag_off:0 ttl:64 proto:50 chk:25695 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:25 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:25 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:25 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55253 frag_off:0 ttl:64 proto:50 chk:25695 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:243 frag_off:0 ttl:120 proto:50 chk:834 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=243 (iv)=0x3114391ae4085f59 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:26 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:243 frag_off:0 ttl:120 proto:4 chk:912 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16488 frag_off:0 ttl:128 proto:1 chk:11614 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23131 DF frag_off:0 ttl:251 proto:1 chk:22634 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:26 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23131 DF frag_off:0 ttl:251 proto:1 chk:22634 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55254 frag_off:0 ttl:64 proto:4 chk:25772 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55254 frag_off:0 ttl:64 proto:50 chk:25694 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:26 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:26 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:26 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55254 frag_off:0 ttl:64 proto:50 chk:25694 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:244 frag_off:0 ttl:120 proto:50 chk:833 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=244 (iv)=0x68d7c9e893561131 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:27 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:244 frag_off:0 ttl:120 proto:4 chk:911 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16489 frag_off:0 ttl:128 proto:1 chk:11613 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23132 DF frag_off:0 ttl:251 proto:1 chk:22633 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:27 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23132 DF frag_off:0 ttl:251 proto:1 chk:22633 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55255 frag_off:0 ttl:64 proto:4 chk:25771 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55255 frag_off:0 ttl:64 proto:50 chk:25693 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:27 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:27 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:27 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55255 frag_off:0 ttl:64 proto:50 chk:25693 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:245 frag_off:0 ttl:120 proto:50 chk:832 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=245 (iv)=0xd5786111e7980353 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:28 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:245 frag_off:0 ttl:120 proto:4 chk:910 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16490 frag_off:0 ttl:128 proto:1 chk:11612 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23133 DF frag_off:0 ttl:251 proto:1 chk:22632 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:28 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23133 DF frag_off:0 ttl:251 proto:1 chk:22632 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55256 frag_off:0 ttl:64 proto:4 chk:25770 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55256 frag_off:0 ttl:64 proto:50 chk:25692 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:28 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:28 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:28 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55256 frag_off:0 ttl:64 proto:50 chk:25692 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:246 frag_off:0 ttl:120 proto:50 chk:831 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=246 (iv)=0xdb462908dd415f66 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:29 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:246 frag_off:0 ttl:120 proto:4 chk:909 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16491 frag_off:0 ttl:128 proto:1 chk:11611 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23134 DF frag_off:0 ttl:251 proto:1 chk:22631 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:29 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23134 DF frag_off:0 ttl:251 proto:1 chk:22631 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55257 frag_off:0 ttl:64 proto:4 chk:25769 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55257 frag_off:0 ttl:64 proto:50 chk:25691 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:29 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:29 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:29 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55257 frag_off:0 ttl:64 proto:50 chk:25691 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:247 frag_off:0 ttl:120 proto:50 chk:830 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=247 (iv)=0xc5a3c7eab00b2487 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:30 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:247 frag_off:0 ttl:120 proto:4 chk:908 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16492 frag_off:0 ttl:128 proto:1 chk:11610 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23135 DF frag_off:0 ttl:251 proto:1 chk:22630 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:30 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23135 DF frag_off:0 ttl:251 proto:1 chk:22630 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55258 frag_off:0 ttl:64 proto:4 chk:25768 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55258 frag_off:0 ttl:64 proto:50 chk:25690 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:30 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:30 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:30 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55258 frag_off:0 ttl:64 proto:50 chk:25690 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:248 frag_off:0 ttl:120 proto:50 chk:829 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=248 (iv)=0xd058a4b6ff64d678 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:31 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:248 frag_off:0 ttl:120 proto:4 chk:907 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16493 frag_off:0 ttl:128 proto:1 chk:11609 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23136 DF frag_off:0 ttl:251 proto:1 chk:22629 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:31 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23136 DF frag_off:0 ttl:251 proto:1 chk:22629 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55259 frag_off:0 ttl:64 proto:4 chk:25767 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55259 frag_off:0 ttl:64 proto:50 chk:25689 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:31 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:31 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:31 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55259 frag_off:0 ttl:64 proto:50 chk:25689 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:249 frag_off:0 ttl:120 proto:50 chk:828 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=249 (iv)=0xad36f9c910e38d8b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:32 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:249 frag_off:0 ttl:120 proto:4 chk:906 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16494 frag_off:0 ttl:128 proto:1 chk:11608 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23137 DF frag_off:0 ttl:251 proto:1 chk:22628 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:32 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23137 DF frag_off:0 ttl:251 proto:1 chk:22628 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55260 frag_off:0 ttl:64 proto:4 chk:25766 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55260 frag_off:0 ttl:64 proto:50 chk:25688 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:32 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:32 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:32 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55260 frag_off:0 ttl:64 proto:50 chk:25688 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:250 frag_off:0 ttl:120 proto:50 chk:827 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=250 (iv)=0xf5a9fa6bce5cbac0 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:33 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:250 frag_off:0 ttl:120 proto:4 chk:905 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16495 frag_off:0 ttl:128 proto:1 chk:11607 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23138 DF frag_off:0 ttl:251 proto:1 chk:22627 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:33 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23138 DF frag_off:0 ttl:251 proto:1 chk:22627 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55261 frag_off:0 ttl:64 proto:4 chk:25765 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55261 frag_off:0 ttl:64 proto:50 chk:25687 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:33 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:33 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:33 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55261 frag_off:0 ttl:64 proto:50 chk:25687 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:251 frag_off:0 ttl:120 proto:50 chk:826 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=251 (iv)=0xb97a04b87538e82a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:34 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:251 frag_off:0 ttl:120 proto:4 chk:904 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16496 frag_off:0 ttl:128 proto:1 chk:11606 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23139 DF frag_off:0 ttl:251 proto:1 chk:22626 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:34 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23139 DF frag_off:0 ttl:251 proto:1 chk:22626 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55262 frag_off:0 ttl:64 proto:4 chk:25764 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55262 frag_off:0 ttl:64 proto:50 chk:25686 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:34 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:34 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:34 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55262 frag_off:0 ttl:64 proto:50 chk:25686 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:252 frag_off:0 ttl:120 proto:50 chk:825 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=252 (iv)=0x3d5d557acf1faaac iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:35 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:252 frag_off:0 ttl:120 proto:4 chk:903 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16497 frag_off:0 ttl:128 proto:1 chk:11605 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23140 DF frag_off:0 ttl:251 proto:1 chk:22625 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:35 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23140 DF frag_off:0 ttl:251 proto:1 chk:22625 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55263 frag_off:0 ttl:64 proto:4 chk:25763 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55263 frag_off:0 ttl:64 proto:50 chk:25685 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:35 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:35 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:35 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55263 frag_off:0 ttl:64 proto:50 chk:25685 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:253 frag_off:0 ttl:120 proto:50 chk:824 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=253 (iv)=0x67bdcd85e8965cec iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:36 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:253 frag_off:0 ttl:120 proto:4 chk:902 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16498 frag_off:0 ttl:128 proto:1 chk:11604 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23141 DF frag_off:0 ttl:251 proto:1 chk:22624 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:36 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23141 DF frag_off:0 ttl:251 proto:1 chk:22624 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55264 frag_off:0 ttl:64 proto:4 chk:25762 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55264 frag_off:0 ttl:64 proto:50 chk:25684 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:36 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:36 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:36 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55264 frag_off:0 ttl:64 proto:50 chk:25684 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:254 frag_off:0 ttl:120 proto:50 chk:823 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=254 (iv)=0x0c002d35262aaf11 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:37 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:254 frag_off:0 ttl:120 proto:4 chk:901 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16499 frag_off:0 ttl:128 proto:1 chk:11603 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23142 DF frag_off:0 ttl:251 proto:1 chk:22623 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:37 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23142 DF frag_off:0 ttl:251 proto:1 chk:22623 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55265 frag_off:0 ttl:64 proto:4 chk:25761 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55265 frag_off:0 ttl:64 proto:50 chk:25683 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:37 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:37 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:37 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55265 frag_off:0 ttl:64 proto:50 chk:25683 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:255 frag_off:0 ttl:120 proto:50 chk:822 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=255 (iv)=0x69bd9b62c50471c1 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:38 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:255 frag_off:0 ttl:120 proto:4 chk:900 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16500 frag_off:0 ttl:128 proto:1 chk:11602 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23143 DF frag_off:0 ttl:251 proto:1 chk:22622 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:38 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23143 DF frag_off:0 ttl:251 proto:1 chk:22622 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55266 frag_off:0 ttl:64 proto:4 chk:25760 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55266 frag_off:0 ttl:64 proto:50 chk:25682 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:38 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:38 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:38 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55266 frag_off:0 ttl:64 proto:50 chk:25682 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:256 frag_off:0 ttl:120 proto:50 chk:821 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=256 (iv)=0xf83fc76db7beb984 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:39 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:256 frag_off:0 ttl:120 proto:4 chk:899 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16501 frag_off:0 ttl:128 proto:1 chk:11601 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23144 DF frag_off:0 ttl:251 proto:1 chk:22621 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:39 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23144 DF frag_off:0 ttl:251 proto:1 chk:22621 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55267 frag_off:0 ttl:64 proto:4 chk:25759 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55267 frag_off:0 ttl:64 proto:50 chk:25681 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:39 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:39 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:39 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55267 frag_off:0 ttl:64 proto:50 chk:25681 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:257 frag_off:0 ttl:120 proto:50 chk:820 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=257 (iv)=0x48ed8174916d4979 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:40 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:257 frag_off:0 ttl:120 proto:4 chk:898 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16502 frag_off:0 ttl:128 proto:1 chk:11600 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23145 DF frag_off:0 ttl:251 proto:1 chk:22620 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:40 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23145 DF frag_off:0 ttl:251 proto:1 chk:22620 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55268 frag_off:0 ttl:64 proto:4 chk:25758 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55268 frag_off:0 ttl:64 proto:50 chk:25680 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:40 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:40 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:40 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55268 frag_off:0 ttl:64 proto:50 chk:25680 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:258 frag_off:0 ttl:120 proto:50 chk:819 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=258 (iv)=0x178d91c915eaec84 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:41 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:258 frag_off:0 ttl:120 proto:4 chk:897 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16503 frag_off:0 ttl:128 proto:1 chk:11599 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23146 DF frag_off:0 ttl:251 proto:1 chk:22619 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:41 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23146 DF frag_off:0 ttl:251 proto:1 chk:22619 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55269 frag_off:0 ttl:64 proto:4 chk:25757 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55269 frag_off:0 ttl:64 proto:50 chk:25679 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:41 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:41 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:41 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55269 frag_off:0 ttl:64 proto:50 chk:25679 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:259 frag_off:0 ttl:120 proto:50 chk:818 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=259 (iv)=0x06d39388b1ad93d2 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:42 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:259 frag_off:0 ttl:120 proto:4 chk:896 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16504 frag_off:0 ttl:128 proto:1 chk:11598 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23147 DF frag_off:0 ttl:251 proto:1 chk:22618 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:42 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23147 DF frag_off:0 ttl:251 proto:1 chk:22618 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55270 frag_off:0 ttl:64 proto:4 chk:25756 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55270 frag_off:0 ttl:64 proto:50 chk:25678 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:42 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:42 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:42 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55270 frag_off:0 ttl:64 proto:50 chk:25678 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:260 frag_off:0 ttl:120 proto:50 chk:817 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=260 (iv)=0x8518d69693b25407 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:43 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:260 frag_off:0 ttl:120 proto:4 chk:895 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16505 frag_off:0 ttl:128 proto:1 chk:11597 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23148 DF frag_off:0 ttl:251 proto:1 chk:22617 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:43 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23148 DF frag_off:0 ttl:251 proto:1 chk:22617 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55271 frag_off:0 ttl:64 proto:4 chk:25755 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55271 frag_off:0 ttl:64 proto:50 chk:25677 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:43 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:43 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:43 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55271 frag_off:0 ttl:64 proto:50 chk:25677 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:261 frag_off:0 ttl:120 proto:50 chk:816 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=261 (iv)=0x2564e27fa332ad43 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:44 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:261 frag_off:0 ttl:120 proto:4 chk:894 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16506 frag_off:0 ttl:128 proto:1 chk:11596 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23149 DF frag_off:0 ttl:251 proto:1 chk:22616 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:44 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23149 DF frag_off:0 ttl:251 proto:1 chk:22616 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55272 frag_off:0 ttl:64 proto:4 chk:25754 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55272 frag_off:0 ttl:64 proto:50 chk:25676 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:44 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:44 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:44 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55272 frag_off:0 ttl:64 proto:50 chk:25676 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:262 frag_off:0 ttl:120 proto:50 chk:815 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=262 (iv)=0xbd04f11d6f540ddb iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:45 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:262 frag_off:0 ttl:120 proto:4 chk:893 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16507 frag_off:0 ttl:128 proto:1 chk:11595 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23150 DF frag_off:0 ttl:251 proto:1 chk:22615 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:45 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23150 DF frag_off:0 ttl:251 proto:1 chk:22615 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55273 frag_off:0 ttl:64 proto:4 chk:25753 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55273 frag_off:0 ttl:64 proto:50 chk:25675 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:45 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:45 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:45 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55273 frag_off:0 ttl:64 proto:50 chk:25675 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:263 frag_off:0 ttl:120 proto:50 chk:814 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=263 (iv)=0x04896dc7c5d77f88 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:46 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:263 frag_off:0 ttl:120 proto:4 chk:892 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16508 frag_off:0 ttl:128 proto:1 chk:11594 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23151 DF frag_off:0 ttl:251 proto:1 chk:22614 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:46 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23151 DF frag_off:0 ttl:251 proto:1 chk:22614 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55274 frag_off:0 ttl:64 proto:4 chk:25752 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55274 frag_off:0 ttl:64 proto:50 chk:25674 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:46 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:46 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:46 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55274 frag_off:0 ttl:64 proto:50 chk:25674 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:264 frag_off:0 ttl:120 proto:50 chk:813 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=264 (iv)=0xe6dd9911c4d0c23a iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:47 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:264 frag_off:0 ttl:120 proto:4 chk:891 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16509 frag_off:0 ttl:128 proto:1 chk:11593 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23152 DF frag_off:0 ttl:251 proto:1 chk:22613 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:47 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23152 DF frag_off:0 ttl:251 proto:1 chk:22613 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55275 frag_off:0 ttl:64 proto:4 chk:25751 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55275 frag_off:0 ttl:64 proto:50 chk:25673 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:47 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:47 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:47 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55275 frag_off:0 ttl:64 proto:50 chk:25673 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:265 frag_off:0 ttl:120 proto:50 chk:812 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=265 (iv)=0x6fbfa7761174b3b6 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:48 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:265 frag_off:0 ttl:120 proto:4 chk:890 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16510 frag_off:0 ttl:128 proto:1 chk:11592 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23153 DF frag_off:0 ttl:251 proto:1 chk:22612 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:48 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23153 DF frag_off:0 ttl:251 proto:1 chk:22612 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55276 frag_off:0 ttl:64 proto:4 chk:25750 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55276 frag_off:0 ttl:64 proto:50 chk:25672 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:48 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:48 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:48 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55276 frag_off:0 ttl:64 proto:50 chk:25672 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:266 frag_off:0 ttl:120 proto:50 chk:811 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=266 (iv)=0x18cdeb151487c2f3 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:49 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:266 frag_off:0 ttl:120 proto:4 chk:889 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16511 frag_off:0 ttl:128 proto:1 chk:11591 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23154 DF frag_off:0 ttl:251 proto:1 chk:22611 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:49 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23154 DF frag_off:0 ttl:251 proto:1 chk:22611 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55277 frag_off:0 ttl:64 proto:4 chk:25749 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55277 frag_off:0 ttl:64 proto:50 chk:25671 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:49 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:49 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:49 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55277 frag_off:0 ttl:64 proto:50 chk:25671 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:267 frag_off:0 ttl:120 proto:50 chk:810 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=267 (iv)=0x959ed641dbf32b5b iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:50 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:267 frag_off:0 ttl:120 proto:4 chk:888 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16512 frag_off:0 ttl:128 proto:1 chk:11590 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23155 DF frag_off:0 ttl:251 proto:1 chk:22610 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:50 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23155 DF frag_off:0 ttl:251 proto:1 chk:22610 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55278 frag_off:0 ttl:64 proto:4 chk:25748 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55278 frag_off:0 ttl:64 proto:50 chk:25670 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:50 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:50 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:50 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55278 frag_off:0 ttl:64 proto:50 chk:25670 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:268 frag_off:0 ttl:120 proto:50 chk:809 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=268 (iv)=0x71338441786627dc iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:51 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:268 frag_off:0 ttl:120 proto:4 chk:887 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16513 frag_off:0 ttl:128 proto:1 chk:11589 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23156 DF frag_off:0 ttl:251 proto:1 chk:22609 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:51 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23156 DF frag_off:0 ttl:251 proto:1 chk:22609 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55279 frag_off:0 ttl:64 proto:4 chk:25747 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55279 frag_off:0 ttl:64 proto:50 chk:25669 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:51 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:51 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:51 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55279 frag_off:0 ttl:64 proto:50 chk:25669 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:269 frag_off:0 ttl:120 proto:50 chk:808 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=269 (iv)=0xebfe180f51a91782 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:52 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:269 frag_off:0 ttl:120 proto:4 chk:886 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16514 frag_off:0 ttl:128 proto:1 chk:11588 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_rcv: netif_rx() called.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<6>klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xcecd2ce8 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:e0:81:01:8f:0f <6>ip=0a010047->c0a8020b
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:e0:81:01:8f:0f:00:e0:81:01:8f:0f:08:00 
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23157 DF frag_off:0 ttl:251 proto:1 chk:22608 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_findroute: 10.1.0.71->192.168.2.11
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_findroute: found, points to proto=4, spi=1002, dst=40ae2b22.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,4
Jun 23 07:11:52 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=174 of SA:tun0x1002@64.174.43.34 requested.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- SA: tun0x1002@64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 20,0
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling room for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: Required head,tailroom: 16,16
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: existing head,tailroom: 18,4 before applying xforms with head,tailroom: 36,16 .
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: mtu:1443 physmtu:1500 tothr:36 tottr:16 mtudiff:-5 ippkttotlen:60
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,4 after hard_header stripped.
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:23157 DF frag_off:0 ttl:251 proto:1 chk:22608 saddr:10.1.0.71 daddr:192.168.2.11
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 68,32 after allocation
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:tun0x1002@64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 20 bytes, putting 0, proto 4.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 48,32 before xform.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:tun0x1002@64.174.43.34:
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:55280 frag_off:0 ttl:64 proto:4 chk:25746 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: calling output for , SA:esp0xce9af7c1@64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: pushing 16 bytes, putting 16, proto 50.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: head,tailroom: 32,16 before xform.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: after , SA:esp0xce9af7c1@64.174.43.34:
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55280 frag_off:0 ttl:64 proto:50 chk:25668 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_findroute: 209.1.1.86->64.174.43.34
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: * See if we match exactly as a host destination
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: ** try to match a leaf, t=0xced862e0
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: *** start searching up the tree, t=0xced862e0
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: **** t=0xced862f8
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: **** t=0xc15506e0
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: ***** cp2=0xc15b4738 cp3=0xc144d650
Jun 23 07:11:52 outside kernel: klips_debug:rj_match: ***** not found.
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: After recursive xforms -- head,tailroom: 32,16
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: With hard_header, final head,tailroom: 18,16
Jun 23 07:11:52 outside kernel: klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on device:eth0
Jun 23 07:11:52 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:55280 frag_off:0 ttl:64 proto:50 chk:25668 saddr:209.1.1.86 daddr:64.174.43.34
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0.
Jun 23 07:11:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:112 id:270 frag_off:0 ttl:120 proto:50 chk:807 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:53 outside kernel: klips_debug:gettdb: linked entry in tdb table for hash=175 of SA:esp0x1fdedd1c@209.1.1.86 requested.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, src=64.174.43.34 of pkt agrees with expected SA source address policy.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 First SA in group.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86 No previous backlink in group.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: packet from 64.174.43.34 received with seq=270 (iv)=0x7a9d3a81482216f4 iplen=112 esplen=80 sa=esp0x1fdedd1c@209.1.1.86
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: encalg = 3, authalg = 2.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: authentication successful.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: padlen=2, contents: 0x: 0x 0x ...
Jun 23 07:11:53 outside kernel: klips_debug:           00: 01 02
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: packet decrypted from 64.174.43.34: next_header = 4, padding = 2
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: trimming to 80.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: after , SA:esp0x1fdedd1c@209.1.1.86:
Jun 23 07:11:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:80 id:270 frag_off:0 ttl:120 proto:4 chk:885 saddr:64.174.43.34 daddr:209.1.1.86
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, backpolicy agrees with fwdpolicy.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: SA:esp0x1fdedd1c@209.1.1.86, Another IPSEC header to process.
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: IPIP tunnel stripped.
Jun 23 07:11:53 outside kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:60 id:16522 frag_off:0 ttl:128 proto:1 chk:11580 saddr:192.168.2.11 daddr:10.1.0.71
Jun 23 07:11:53 outside kernel: klips_debug:ipsec_rcv: net