Re: racoon still also broken

[Pawel Biernacki <kaktus@xxxxxxxxxxxxxxx>]

On 2004-10-14, Andrew Atrens <atrens@xxxxxxxxxxxxxxxxxx> wrote:
> As an aside, racoon is also broken.
>
> I'm using ethereal on both sides of the link and I can see
> both racoon daemons sending udp packets - on both sides of the
> link, but neither appear to 'see' other's packets.
>
> Eventually, the daemons both die with -
> 2004-10-14 12:28:44: INFO: isakmp.c:909:isakmp_ph1begin_r(): begin 
> Aggressive mode.
> 2004-10-14 12:29:03: ERROR: sockmisc.c:318:recvfromto(): recvmsg 
> (Resource temporarily unavailable)
>
> Not sure what the error means. I suppose it's either a listening
> problem, or a delivery problem. At any rate it looks like it's in
> the stack somewhere.
>

i've a strange problem with stopping racoon. after establish any ipseced
connection the only way to stop racoon is kill -9. tested with IPSEC and
FAST_IPSEC.

apocalypse# /usr/local/etc/rc.d/racoon.sh stop
Stopping racoon.
Waiting for PIDS: 1138, 1138, 1138, 1138, 1138, 1138, 1138, 1138, 1138,
1138, 1138, 1138, 1138, 1138, 1138, 1138, 1138, 1138, 1138,^C

in the same time truss shows:

SIGNAL 15
SIGNAL 15
SIGNAL 15
recvmsg(0xb,0xbfbff944,0x0)                      ERR#27 'File too large'
sigreturn(0xbfbff680)                            ERR#27 'File too large'

--