1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
|
/lib/ld-linux.so.2
libgcrypt.so.11
gcry_md_get_algo_dlen
gcry_mpi_scan
gcry_md_close
gcry_mpi_get_nbits
gcry_md_read
gcry_md_setkey
gcry_mpi_copy
gcry_mpi_powm
gcry_control
gcry_randomize
gcry_md_write
gcry_mpi_mul_2exp
gcry_cipher_open
gcry_cipher_ctl
gcry_md_hash_buffer
gcry_cipher_close
gcry_cipher_algo_info
gcry_free
gcry_mpi_add_ui
gcry_cipher_encrypt
gcry_md_open
gcry_check_version
gcry_mpi_set_ui
gcry_cipher_decrypt
gcry_mpi_new
gcry_mpi_release
_Jv_RegisterClasses
gcry_md_ctl
gcry_mpi_aprint
__gmon_start__
libgpg-error.so.0
_DYNAMIC
_init
_fini
_GLOBAL_OFFSET_TABLE_
libc.so.6
putchar
strcpy
unsetenv
ioctl
stdout
connect
getenv
__strtol_internal
getpid
__getdelim
memcpy
perror
puts
getpass
system
feof
malloc
recvfrom
socket
fflush
strncasecmp
abort
uname
calloc
fprintf
strcat
bind
chdir
setsockopt
stdin
signal
openlog
strncmp
strncpy
strcasecmp
sendto
realloc
__strdup
fork
inet_aton
memset
inet_ntoa
time
__assert_fail
poll
syslog
gethostbyname
asprintf
fclose
stderr
fwrite
__errno_location
inet_ntop
fopen
_IO_stdin_used
_exit
__libc_start_main
setsid
getsockname
_edata
__bss_start
_end
GLIBC_2.1
GLIBC_2.0
GCRYPT_1.2
PTRh
QVhT
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
;A0t
q0Ph_
Ph@#
PVht
w0PS
w0PS
G0;G
G(;G0|
w(PS
[^_]
;B0t
p0Sh
[^_]
w0PS
[^_]
[^_]
[^_]
Ph@$
[^_]
[^_]
[^_]
WSh@%
r0PS
[^_]
[^_]
[^_]
PSht
[^_]
[^_]
Rh>
PhW
Pho
[^_]
[^_]
F PS
F PS
F PS
[^_]
[^_]
[^_]
[^_]
Ph@1
PhR1
Ph@1
Phi1
[^_]
Ph}1
G Ph
Ph}1
G Ph
G Ph
Ph"2
Ph22
PhJ2
PhP2
Ph[2
Phh2
PhJ2
PhP2
Ph[2
Ph|2
G Ph
[^_]
[^_]
C Pj
Phm9
[^_]
;V(t<
9Z8u
9B`t
[^_]
pHWh
pThs;
pHWj
Phq:
[^_]
[^_]
P`Qh
p8h =
PhL^
hH^
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
[^_]
nopfs
sha1
3des
aes128
aes192
aes256
get_algo
vpnc.c
what <= SUPP_ALGO_CRYPT
key <= SUPP_ALGO_IPSEC_SA
server
%s:%c
%02x
making socket
binding to port %d
out of memory
unknown host `%s'
using interface %s
receiving packet
exchange_type
can't send packet
can't poll socket
no response from target
S4.1
i_cookie
i_nonce
S4.2
dh_public
S4.3
S4.4
response was invalid [1]: %s
IKE SA selected %s-%s
response was invalid [2]: %s
response was invalid [3]: %s
skeyid
returned_hash
dh_shared_secret
skeyid_d
skeyid_a
skeyid_e
enc-key
do_phase_1
d->ivlen < d->md_len
current_iv
S4.5
initial_iv
S4.6
hashlen: %d
u.hash.length: %d
expected_hash
h->u.hash.data
authing NULL package!
S5.1
S5.2
malformed loadbalance target
S5.3
S5.4
%c%c
%.*s%s
S5.5
xauth packet unsupported: %s
reading user input
S5.6
authentication unsuccessful
S5.7
CISCO_BANNER
CISCO_DEF_DOMAIN
INTERNAL_IP4_NBNS
INTERNAL_IP4_DNS
INTERNAL_IP4_NETMASK
INTERNAL_IP4_ADDRESS
Banner:
Remote Application Version:
got pfs setting: %d
got address %s
TUNDEV
VPNGATEWAY
S7.1
len = %d
S7.2
S7.3
S7.4
S7.5
S7.6
IPSEC SA selected %s-%s
S7.7
S7.8
S7.9
S7.10
default value for this option
commandline option,
configfile variable,
argument type
description
--gateway
IPSec gateway
<ip/hostname>
IP/name of your IPSec gateway
--id
IPSec ID
<ASCII string>
your group name
IPSec secret
--username
Xauth username
your username
Xauth password
--script
Config Script
<command>
--domain
Domain
--dh
IKE DH Group
<dh1/dh2/dh5>
name of the IKE DH Group
--pfs
Perfect Forward Secrecy
<nopfs/dh1/dh2/dh5/server>
--enable-1des
Enable Single DES
--application-version
Application version
Application Version to report
--ifname
Interface name
--debug
Debug
<0/1/2/3/99>
Show verbose debug messages
--no-detach
No Detach
--pid-file
Pidfile
<filename>
--local-port
Local Port
<0-65535>
--non-inter
Noninteractive
couldn't open `%s'
reading `%s'
can't allocate memory
Legend:
(configfile only option)
%s %s
%s%s
%s
Default: %s
1.1.12
hex_test
--version
vpnc version 0.2-rm+zomb.1
Supported DH-Groups:
Supported Hash-Methods:
Supported Encryptions:
--print-config
--help
%s: unknown option %s
/etc/vpnc/default.conf
/etc/vpnc.conf
Enter IPSec gateway address:
Enter IPSec ID for %s:
Enter username for %s:
Enter password for %s@%s:
vpnc.conf:
%s%s
missing IPSec gatway address
missing IPSec ID
missing IPSec secret
missing Xauth username
missing Xauth password
can't initialise tunnel interface
got response from unknown host %s:%d
want extype %d, got %d, ignoring
unknown attribute %d, arborting..
hash comparison failed: %s
check group password!
---!!!!!!!!! entering phase2_fatal !!!!!!!!!---
got cisco loadbalancing notice, diverting to %s
got responder liftime notice, ignoring..
expected xauth packet; rejected: %s
server requested domain, but none set (use "Domain ..." in config or --domain
xauth SET response rejected: %s
configuration response rejected: %s
generating %d bytes keymat (cnt=%d)
ignoring responder-lifetime notify
quick mode response rejected: %s
check pfs setting
quick mode response rejected [2]: %s
Cisco Systems VPN Client %s:%s
your group password (cleartext, no support for obfuscated strings)
your password (cleartext, no support for obfuscated strings)
command is executed using system() to configure the interface,
routing and so on. Device name, IP, etc. are passed using enviroment
variables, see README. This script is executed right after ISAKMP is
done, but befor tunneling is enabled.
(NT-) Domain name for authentication
Diffie-Hellman group to use for PFS
enables weak single DES encryption
visible name of the TUN interface
Don't detach from the console after login
store the pid of background process in <filename>
local ISAKMP port number to use (0 == use random port)
Don't ask anything, exit on missing options
warning: unknown configuration directive in %s at line %d
Usage: %s [--version] [--print-config] [--help] [options] [config file]
Report bugs to [email protected]
Copyright (C) 2002, 2003 Geoffrey Keating, Maurice Massar
vpnc comes with NO WARRANTY, to the extent permitted by law.
You may redistribute copies of vpnc under the terms of the GNU General
Public License. For more information about these matters, see the files
named COPYING.
WARNING! active debug level is >= 99, output includes username and password (hex encoded)
WARNING! active debug level is >= 99, output includes username and password (hex encoded)
Enter IPSec secret for %s@%s:
IKE DH Group "%s" unsupported
Perfect Forward Secrecy "%s" unsupported
IKE DH Group must not be nopfs
; H_
malloc of %lu bytes failed
alloc of %lud bytes failed
flatten_isakmp_packet
isakmp-pkt.c
blksz != 0
t.attributes.type
t.attributes.u.attr_16
t.attributes.u.lots.length
(not dumping xauth data)
t.attributes.u.lots.data
next_type
sa.doi
sa.situation
p.number
p.prot_id
p.spi_size
p.spi
t.number
t.id
ke.data
id.type
id.protocol
id.port
id.data
cert.encoding
cert.data
n.doi
n.protocol
n.spi_length
n.type
n.spi
n.data
d.num_spi
d.spi
modecfg.type
DONE PARSING PAYLOAD type
BEGIN_PARSE
r_cookie
payload
isakmp_version
flags
message_id
PARSE_OK
INVALID_PAYLOAD_TYPE
DOI_NOT_SUPPORTED
SITUATION_NOT_SUPPORTED
INVALID_COOKIE
INVALID_MAJOR_VERSION
INVALID_MINOR_VERSION
INVALID_EXCHANGE_TYPE
INVALID_FLAGS
INVALID_MESSAGE_ID
INVALID_PROTOCOL_ID
INVALID_SPI
INVALID_TRANSFORM_ID
ATTRIBUTES_NOT_SUPPORTED
NO_PROPOSAL_CHOSEN
BAD_PROPOSAL_SYNTAX
PAYLOAD_MALFORMED
INVALID_KEY_INFORMATION
INVALID_ID_INFORMATION
INVALID_CERT_ENCODING
INVALID_CERTIFICATE
CERT_TYPE_UNSUPPORTED
INVALID_CERT_AUTHORITY
INVALID_HASH_INFORMATION
AUTHENTICATION_FAILED
INVALID_SIGNATURE
ADDRESS_NOTIFICATION
NOTIFY_SA_LIFETIME
CERTIFICATE_UNAVAILABLE
UNSUPPORTED_EXCHANGE_TYPE
UNEQUAL_PAYLOAD_LENGTHS
|S5v
size = %ld, blksz = %ld, padding = %ld
sending: ========================>
(not dumping xauth data length)
recvfrom: %m
packet too short from %s
truncated in: %d -> %d
socket(SOCK_RAW)
setsockopt(IP_HDRINCL)
ipesp
socket: %m
connect: %m
getsockname: %m
local address for %s is %s
unknown spi %ld
hmac_compute
tunip.c
md_ctx != 0
ret == 0
sending ESP packet (after ah)
sendto: %m
truncated out (%d out of %d)
Packet too short
HMAC mismatch in ESP mode
Inconsistent padlen
Inconsistent next_header %d
Bad padding
poll: %m
read: %m
routing loop to %s
unknown spi from %s
terminated
tous.enc_secret
tous.auth_secret
tothem.enc_secret
tothem.auth_secret
vpnc
VPNC started in foreground...
can't find a local address for packets to %s
sending packet: len = %d, padding = %d
sending ESP packet (before crypt)
sending ESP packet (after crypt)
payload len %d not a multiple of algorithm block size %d
peer hasn't a known address yet
spi %ld: remote address changed from %s to %s
received update probe from peer
can't open pidfile %s for writing
Warning, could not fork the child process!
VPNC started in background (pid: %d)...
/dev/net/tun
can't open /dev/net/tun, check that it is either device char 10 200 or (with DevFS) a symlink to ../misc/net/tun (not misc/net/tun!!!)
ifconfig $TUNDEV inet $INTERNAL_IP4_ADDRESS pointopoint $INTERNAL_IP4_ADDRESS netmask 255.255.255.255 mtu 1412 up
FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A63A3620FFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D670C354E4ABC9804F1746C08CA237327FFFFFFFFFFFFFFFF
id <= (int)(sizeof (groups) / sizeof (groups[0]))
group_init
math_group.c
groups[i].type == MODP
group_get
id >= 1
clone->type == MODP
group_free
grp->type == MODP
modp_clone
new_grp
modp_init
|