Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 May 2001 09:54:49 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        Brandt Everett <everett@bentonrea.com>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: IPSEC
Message-ID:  <20010516095449.B30702@xor.obsecurity.org>
In-Reply-To: <001c01c0de13$41134260$632807d8@prosser.bentonrea.org>; from everett@bentonrea.com on Wed, May 16, 2001 at 07:19:43AM -0700
References:  <Pine.BSF.4.21.0105160802090.99912-100000@marlo.eagle.ca> <001c01c0de13$41134260$632807d8@prosser.bentonrea.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--rS8CxjVDS/+yyDmU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, May 16, 2001 at 07:19:43AM -0700, Brandt Everett wrote:
> Can someone translate this error message for me?  I don't know what this
> means, or where to start looking at it.  It is for a esp/transport//requi=
re
> policy.  I am using manual keying.  I do have a tunnel up and running, and
> from time to time get a similar error.  Any ideas.
>=20
>    /kernel: IPv4 ESP input: no key association found for spi 9995;dropping
> the packet for simplicity

Well, exactly what it says, I would assume.  It received a packet with
SPI 9995 for which it couldn't find a key association, so it dropped
the packet because it didnt know what to do with it.

Kris

--rS8CxjVDS/+yyDmU
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7ArDYWry0BWjoQKURAiSxAKDOv+NmeqYX+VQb34iZQErfI5JRRACfWS7f
OurFsOUVJyjAOQyGmA6ZiqY=
=vYbn
-----END PGP SIGNATURE-----

--rS8CxjVDS/+yyDmU--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010516095449.B30702>