Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Feb 2018 11:01:18 +0400
From:      Misak Khachatryan <kmisak@gmail.com>
To:        Eugene Grosbein <eugen@grosbein.net>
Cc:        "Andrey V. Elsukov" <bu7cher@yandex.ru>, freebsd-net@freebsd.org
Subject:   Re: Racoon and setkey problems
Message-ID:  <CABfKv0=M21Fa3kB5Sfiqz3Bq=szxLJWUbjuQt-cm5XSYY=Dxqg@mail.gmail.com>
In-Reply-To: <CABfKv0kci4Nx5h8nm_fvcmz_0hkih_yQwsZ1v5GFtikjU4SCSQ@mail.gmail.com>
References:  <CABfKv0mYX2ouQ1k6M2Bd90yp=eQXP6HcHL7%2BdE2AZQ9afQ%2Bc2g@mail.gmail.com> <5A8A97EC.4040103@grosbein.net> <CABfKv0ntGt6TCP7v9xa=MSSZqHwYbZtYtVd6s0gZ-Mbdu2qk5A@mail.gmail.com> <16e6d695-6961-bc17-6ff0-e2affcd5df3b@yandex.ru> <CABfKv0kvTLJjv7F6y7DTXxE-oXspOHTJti%2Bj0Ftqv5xVpqQQRQ@mail.gmail.com> <5A8BB836.2010501@grosbein.net> <CABfKv0m-Dcmonx0LewqvRN_Z51vjaVO3mDsRwiqKK%2BVy=HX14g@mail.gmail.com> <CABfKv0nr4Up3yaugqM_0Wj5tkJdawWEmD-N5qjBBi2DgYhVi3w@mail.gmail.com> <CABfKv0mW=bFQGwVEgfQgKybwCh9OgjP3sdhJ_FkBBxK_OmAS7A@mail.gmail.com> <CABfKv0kci4Nx5h8nm_fvcmz_0hkih_yQwsZ1v5GFtikjU4SCSQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
One of the machines didn't connected to the Internet, have only private ip
address on it's interfaces, so i have doubts about that. But thanks, I'll
check for that too. I'm exporting traffic from two machines to netflow
collector, should be easy.

On Feb 20, 2018 9:55 AM, "Eugene Grosbein" <eugen@grosbein.net> wrote:

On 20.02.2018 00:44, Misak Khachatryan wrote:
> Hi Andrey,
>
> yes, all output is from same machine. I'll recheck all configs again,
> or, if it's OK, I can post them here. The most confusing thing is that
> everything worked as a charm several years. And nothing changed in
> configurations until logs stars to fill up with these messages and i
> tried to play with some settings to troubleshoot.

You may be suffering from some kind of massive IPSEC-scanning bots activity
that try to expoit IPSEC-related bugs and trigger some memory leak.

You should really try 11.1.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CABfKv0=M21Fa3kB5Sfiqz3Bq=szxLJWUbjuQt-cm5XSYY=Dxqg>