[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] 4.3.6dr5: Question about XFRM_MSG_DELPOLICY log
From:       Andreas Steffen <andreas.steffen () strongswan ! org>
Date:       2010-02-04 17:41:27
Message-ID: 4B6B06C7.20905 () strongswan ! org
[Download RAW message or body]

Hello Thomas,

I also noticed these messages and it is on my TODO list to check
the reason for the changed XFRM payload size before we release
strongSwan 4.3.6 sometime next week. I think it is not something
to worry about, though. It might be related to the support of the
SHA2 HMAC ESP algorithms that Martin provided, which due to an
additional XFRM struct definition required an extension of the
xfrm.h header file. Martin's kernel patch will be officially
included in the Linux 2.6.33 kernel.

Best regards

Andreas

Thomas Jarosch wrote:
> Hello,
> 
> I've upgraded from strongswan 4.2.17 to strongswan 4.3.6dr5.
>>From time to time I see this message in the logs:
> 
> "pluto[6277]: netlink recvfrom() of response to our XFRM_MSG_DELPOLICY 
> message for policy %hold was too long: 100 > 36"
> 
> or
> 
> "pluto[6277]: netlink recvfrom() of response to our XFRM_MSG_DELPOLICY 
> message for policy int.0@IP.A.DD.R was too long: 100 > 36"
> 
> 
> Is this something to worry about? What's the cause?
> 
> Thanks in advance,
> Thomas

======================================================================
Andreas Steffen                         andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]