Re: ah_input: packet replay failure

2010-12-04 Thread Bjoern A. Zeeb
On Fri, 3 Dec 2010, Eugene M. Zheganin wrote: Hi. On 03.12.2010 01:58, Bjoern A. Zeeb wrote: FreeBSD A >==ipsec over gre===> FreeBSD B I'm using FreeBSD as a security gateway: What it means is that a packet with either an invalid sequence, a sequence lower than the last seen and outside

Re: ah_input: packet replay failure

2010-12-03 Thread Eugene M. Zheganin
Hi. On 03.12.2010 01:58, Bjoern A. Zeeb wrote: FreeBSD A >==ipsec over gre===> FreeBSD B I'm using FreeBSD as a security gateway: What it means is that a packet with either an invalid sequence, a sequence lower than the last seen and outside the window, or a sequence seen already (lately

Re: ah_input: packet replay failure

2010-12-02 Thread Bjoern A. Zeeb
On Thu, 2 Dec 2010, Eugene M. Zheganin wrote: Hi, What does this message means ? I'm getting a lots of those. ===Cut=== Dec 2 14:35:15 ural85-gw0-omega kernel: ah_input: packet replay failure: SA(SPI=3662816 src=10.50.116.6 dst=10.50.110.210) ===Cut=== you are running with debugging

ah_input: packet replay failure

2010-12-02 Thread Eugene M. Zheganin
Hi. What does this message means ? I'm getting a lots of those. ===Cut=== Dec 2 14:35:15 ural85-gw0-omega kernel: ah_input: packet replay failure: SA(SPI=3662816 src=10.50.116.6 dst=10.50.110.210) ===Cut=== I'm using FreeBSD as a security gateway: FreeBSD A >==i