Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 220795

Summary: net-misc/vpnc-0.5.1-r1 dies always after a while
Product: Gentoo Linux Reporter: Albert Zeyer <albzey>
Component: Current packagesAssignee: Christian Faulhammer (RETIRED) <fauli>
Status: RESOLVED DUPLICATE    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Albert Zeyer 2008-05-07 18:14:17 UTC
When I run vpnc manually in debug-level 2, I get this at the end:

...
   lifetime status: 8709 of 36000 seconds used, 600304|18315 of 0 kbytes used
   lifetime status: 8709 of 36000 seconds used, 600304|18316 of 0 kbytes used
   lifetime status: 8709 of 36000 seconds used, 600304|18317 of 0 kbytes used
   lifetime status: 8710 of 36000 seconds used, 600304|18319 of 0 kbytes used
vpnc: can't send packet: Invalid argument

The connection often stays stable for about an hour (sometimes more, often less) but then dies. Sometimes there is no error, I just see the upload strangly increasing fastly all the time (without any data being send). If there is an error, it's the one pasted above (until now; I will post further errors if there are any different ones).

The vpnc connection is over a wireless network (with madwifi-ng driver). The connection itself is not perfect but works all the time. Always, when the connection of vpnc dies, a restart of vpnc is enough to get everything working again.
Comment 1 Albert Zeyer 2008-05-07 18:23:02 UTC
Another error if the connection just dies but vpnc does not recognise it immediatly and when I wait some more minutes:

...
   lifetime status: 935 of 28800 seconds used, 319|5379 of 0 kbytes used
   dead peer detected, terminating

S7.10 send termination message


S8 close_tunnel

RTNETLINK answers: File exists
RTNETLINK answers: No such process
Comment 2 Albert Zeyer 2008-05-07 18:26:00 UTC
macbook ~ # emerge --info
Portage 2.1.4.4 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.24-gentoo i686)
=================================================================
System uname: 2.6.24-gentoo i686 Intel(R) Core(TM)2 CPU T7400 @ 2.16GHz
Timestamp of tree: Mon, 05 May 2008 10:30:02 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
app-shells/bash:     3.2_p17-r1
dev-java/java-config: 1.3.7, 2.1.6
dev-lang/python:     2.4.4-r9
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=nocona -pipe -ggdb"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=nocona -pipe -ggdb"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms splitdebug unmerge-orphans userfetch"
GENTOO_MIRRORS="http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ ftp:///ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ ftp://ftp6.uni-erlangen.de/pub/mirrors/gentoo ftp://vlaai.snt.ipv6.utwente.nl/pub/os/linux/gentoo/ ftp://mirror.nutsmaas.nl/gentoo/"
LINGUAS="de"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/private"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="7zip X a52 aac acl acpi alsa amarok amr amuled apm applet async asyncns atm automount avahi bash-completion berkdb bluetooth bonjour bookmarks bzip2 cairo cdr cli cracklib crypt cups d dbus dedicated deskbar dga dhcp divx dri dv dvd dvdr dvdread dvi eap-tls enblend encode evo exif extra-algorithms fasttrack ffmpeg flac ftp galago gd gdbm german gif glib glitz gmedia gnome gnutella gnutls gpm gsf gtk h323 hal haskell hddtemp hfs iconv icu id3 id3tag ieee1394 imlib injection inkjar ipv6 irda isdnlog isight jabber java javascript jit jpeg jpeg2k kqemu latex lcms libnotify lirc lm_sensors lua lzo macbook mad madwifi maps midi mmap mmx mng mozdevelop mp2 mp3 mp4 mpeg mtp mudflap musicbrainz nautilus ncurses net network networking networkmanager njb nls nptl nptlonly nsplugin ntfs ogg opengl openmp oss pam pascal pch pcre pdf perl pidgin plotutils pmu png pnm posix postgres postscript ps pulseaudio python qt3support qt4 quicktime rar rc5 rdesktop readline real realmedia reflection reiser4 reiserfs rtc samba screen sdl sdl-image sdl-sound sdlaudio server session sftp sharedmem sift smp sourceview speex spell spl sse sse2 ssl ssse3 startup-notification subversion svg theora threads threadsafe tiff timidity tk trayicon truetype unicode unzip usb v4l2 valgrind vcd video vorbis weak-algorithms wifi win32codecs wma wmp wxwindows x264 x86 xanim xattr xcomposite xext xine xml xmlreader xorg xrandr xscreensaver xulrunner xv xvid zip zlib zsh-completion" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse synaptics evdev wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" LIRC_DEVICES="inputlirc macmini" USERLAND="GNU" VIDEO_CARDS="i810 vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 3 Albert Zeyer 2008-05-07 18:28:33 UTC
macbook ~ # ifconfig ath0
ath0      Link encap:Ethernet  HWaddr 00:1C:B3:BD:85:8F  
          inet addr:134.61.37.119  Bcast:134.61.39.255  Mask:255.255.248.0
          inet6 addr: fe80::21c:b3ff:febd:858f/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3730718 errors:0 dropped:0 overruns:0 frame:0
          TX packets:587585 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2302847138 (2196.1 Mb)  TX bytes:79844987 (76.1 Mb)

macbook ~ # lspci | grep -i Atheros
02:00.0 Network controller: Atheros Communications, Inc. AR5418 802.11a/b/g/n Wireless PCI Express Adapter (rev 01)

Madwifi-ng from SVN, revision 3545.
Comment 4 Albert Zeyer 2008-05-07 19:28:56 UTC
Just want to note, this timeout is the most often case when the connection dies:

...
   lifetime status: 1532 of 1800 seconds used, 3752|31645 of 0 kbytes used
   lifetime status: 1532 of 1800 seconds used, 3752|31646 of 0 kbytes used
   lifetime status: 1532 of 1800 seconds used, 3752|31647 of 0 kbytes used
   lifetime status: 1532 of 1800 seconds used, 3752|31648 of 0 kbytes used
   lifetime status: 1532 of 1800 seconds used, 3752|31650 of 0 kbytes used
   lifetime status: 1532 of 1800 seconds used, 3752|31651 of 0 kbytes used
   lifetime status: 1533 of 1800 seconds used, 3752|31652 of 0 kbytes used
   dead peer detected, terminating

S7.10 send termination message


S8 close_tunnel

RTNETLINK answers: File exists
RTNETLINK answers: No such process


This timeout is also the most annoying case as it take always some minutes until it detects the "dead peer".

The first case I posted was better, it took only around 10-30 seconds after the connection died to the error. (Still not good, but better.)

I am missing a possibility in vpnc to reenable the connection automatically if it dies. Or is there any I have missed?
Comment 5 Albert Zeyer 2008-05-07 21:08:57 UTC
Here some information about the vpnc connection itself:

macbook ~ # vpnc --no-detach --debug 2 /etc/vpnc/vpnc.conf 
   
vpnc version 0.5.1

S1 init_sockaddr


S2 make_socket


S3 setup_tunnel

   using interface vpnlink

S4 do_phase1


S4.1 create_nonce


S4.2 dh setup


S4.3 AM packet_1


S4.4 AM_packet2

   got ike lifetime attributes: 2147483 seconds
   IKE SA selected psk+xauth-3des-md5
   peer is DPD capable (RFC3706)
   peer is NAT-T capable (draft-02)\n
   peer is using type 130 (ISAKMP_PAYLOAD_NAT_D_OLD) for NAT-Discovery payloads
   peer is using type 130 (ISAKMP_PAYLOAD_NAT_D_OLD) for NAT-Discovery payloads

S4.5 AM_packet3

   NAT status: NAT-T VID seen, no NAT device detected

S4.6 cleanup


S5 do_phase2_xauth


S5.1 xauth_start


S5.2 notice_check

   got cisco loadbalancing notice, diverting to 134.130.5.231

S6 do_phase2_config


S4 do_phase1


S4.1 create_nonce


S4.2 dh setup


S4.3 AM packet_1


S4.4 AM_packet2

   got ike lifetime attributes: 2147483 seconds
   IKE SA selected psk+xauth-3des-md5
   peer is DPD capable (RFC3706)
   peer is NAT-T capable (draft-02)\n
   peer is using type 130 (ISAKMP_PAYLOAD_NAT_D_OLD) for NAT-Discovery payloads
   peer is using type 130 (ISAKMP_PAYLOAD_NAT_D_OLD) for NAT-Discovery payloads

S4.5 AM_packet3

   NAT status: NAT-T VID seen, no NAT device detected

S4.6 cleanup


S5 do_phase2_xauth


S5.1 xauth_start


S5.2 notice_check


S5.3 type-is-xauth check


S5.4 xauth type check

Enter Username and Password.

S5.5 do xauth authentication


S5.2 notice_check


S5.3 type-is-xauth check


S5.6 process xauth response


S5.7 xauth done


S6 do_phase2_config

   got save password setting: 1
   got pfs setting: 0
   Remote Application Version:    Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.O built by vmurphy on Mar 05 2008 16:24:28   
   got address 134.130.240.31

S7 setup_link (phase 2 + main_loop)


S7.1 QM_packet1


S7.2 QM_packet2 send_receive


S7.3 QM_packet2 validate type


S7.4 process and skip lifetime notice

   got ike lifetime attributes: 86400 seconds

S7.2 QM_packet2 send_receive


S7.3 QM_packet2 validate type


S7.5 QM_packet2 check reject offer


S7.6 QM_packet2 check and process proposal

   got ipsec lifetime attributes: 2147483 seconds
   IPSEC SA selected 3des-md5
   got ipsec lifetime attributes: 36000 seconds

S7.7 QM_packet3 sent - run script


S7.8 setup ipsec tunnel


S7.9 main loop (receive and transmit ipsec packets)

   remote -> local spi: 0xf314ce92
   local -> remote spi: 0x5b4585e
VPNC started in foreground...
   lifetime status: 0 of 36000 seconds used, 0|0 of 0 kbytes used
   got late ike paket: 180 bytes
   lifetime status: 0 of 36000 seconds used, 0|0 of 0 kbytes used
   got late ike paket: 172 bytes
...
Comment 6 Christian Faulhammer (RETIRED) gentoo-dev 2008-05-08 13:14:16 UTC
This is hard for me to debug, so I will inform upstream about it.
Comment 7 Albert Zeyer 2008-05-08 13:25:09 UTC
I have already sent a mail to upstream. (No response yet.)
Comment 8 Christian Faulhammer (RETIRED) gentoo-dev 2008-05-08 13:41:30 UTC
Bug #218974 contains a similar notice though the submitter just disappeared.  Sorry for you, but I cannot do too much.  Are you willing to try a SVN snapshot of vpnc?  There have been 40 commits since the release of 0.5.1.  You want me to prepare an ebuild for that or will you do it on your own?
Comment 9 Albert Zeyer 2008-05-08 13:53:54 UTC
I am running SVN rev 284 now. I will report back if there are still errors.
Comment 10 Albert Zeyer 2008-05-08 18:06:39 UTC
The bug about the dead pear still occurs after a while: (in SVN rev 284)

...
   lifetime status: 929 of 36000 seconds used, 66231|2604 of 0 kbytes used
   lifetime status: 929 of 36000 seconds used, 66231|2604 of 0 kbytes used
   lifetime status: 930 of 36000 seconds used, 66231|2604 of 0 kbytes used
   dead peer detected, terminating

S7.10 send termination message
 [2008-05-08 19:59:23]

S8 close_tunnel
 [2008-05-08 19:59:23]
RTNETLINK answers: File exists
Comment 11 Christian Faulhammer (RETIRED) gentoo-dev 2008-05-09 17:49:10 UTC
This is a dupe as far as I can see.

*** This bug has been marked as a duplicate of bug 218974 ***