./rekeyikev2-R1 ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
./rekeyikev2-R1 ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
./rekeyikev2-R1 ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
./rekeyikev2-R1 loading secrets from "../samples/jj.secrets"
./rekeyikev2-R1 loaded private key for keyid: PPK_RSA:AQOg5H7A4
| processing whack message of size: A
| processing whack message of size: A
processing whack msg time: X size: Y
| processing whack message of size: A
processing whack msg time: X size: Y
| processing whack message of size: A
processing whack msg time: X size: Y
| Added new connection parker1--jj2 with policy RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+IKEv2Init+SAREFTRACK
| counting wild cards for @jamesjohnson.emmjay.credil.org is 0
| counting wild cards for @parker01.emmjay.credil.org is 0
| orient parker1--jj2 checking against if: eth0 (AF_INET:132.213.238.7:500)
|     orient matched on IP
|   orient parker1--jj2 finished with: 1 [132.213.238.7]
| find_host_pair: looking for me=132.213.238.7:500 %address him=192.168.1.1:500 exact-match
| find_host_pair: concluded with <none>
| connect_to_host_pair: 132.213.238.7:500 %address 192.168.1.1:500 -> hp:none
| find_ID_host_pair: looking for me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (exact)
|   concluded with <none>
./rekeyikev2-R1 adding connection: "parker1--jj2"
| fd68:c9f9:4157::/64===132.213.238.7[@jamesjohnson.emmjay.credil.org]...192.168.1.1[@parker01.emmjay.credil.org]===fd68:c9f9:4157:2:0:1::/96
| ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+IKEv2Init+SAREFTRACK
|   orient parker1--jj2 finished with: 1 [132.213.238.7]
RC=0 "parker1--jj2": fd68:c9f9:4157::/64===132.213.238.7[@jamesjohnson.emmjay.credil.org]...192.168.1.1[@parker01.emmjay.credil.org]===fd68:c9f9:4157:2:0:1::/96; unrouted; eroute owner: #0
RC=0 "parker1--jj2":     myip=unset; hisip=unset;
RC=0 "parker1--jj2":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
RC=0 "parker1--jj2":   policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+IKEv2Init+SAREFTRACK; prio: 64,96; interface: eth0; kind=CK_PERMANENT
0: input from ../lp12-parentR2/parentI1.pcap
| *received 836 bytes from 192.168.1.1:500 on eth0 (port=500)
|   80 01 02 03  04 05 06 07  00 00 00 00  00 00 00 00
|   21 20 22 08  00 00 00 00  00 00 03 44  22 00 01 fc
|   02 00 00 2c  01 01 00 04  03 00 00 0c  01 00 00 0c
|   80 0e 00 80  03 00 00 08  03 00 00 02  03 00 00 08
|   02 00 00 02  00 00 00 08  04 00 00 0e  02 00 00 2c
|   02 01 00 04  03 00 00 0c  01 00 00 0c  80 0e 00 80
|   03 00 00 08  03 00 00 01  03 00 00 08  02 00 00 01
|   00 00 00 08  04 00 00 0e  02 00 00 28  03 01 00 04
|   03 00 00 08  01 00 00 03  03 00 00 08  03 00 00 02
|   03 00 00 08  02 00 00 02  00 00 00 08  04 00 00 0e
|   02 00 00 28  04 01 00 04  03 00 00 08  01 00 00 03
|   03 00 00 08  03 00 00 01  03 00 00 08  02 00 00 01
|   00 00 00 08  04 00 00 0e  02 00 00 2c  05 01 00 04
|   03 00 00 0c  01 00 00 0c  80 0e 00 80  03 00 00 08
|   03 00 00 02  03 00 00 08  02 00 00 02  00 00 00 08
|   04 00 00 05  02 00 00 2c  06 01 00 04  03 00 00 0c
|   01 00 00 0c  80 0e 00 80  03 00 00 08  03 00 00 01
|   03 00 00 08  02 00 00 01  00 00 00 08  04 00 00 05
|   02 00 00 28  07 01 00 04  03 00 00 08  01 00 00 03
|   03 00 00 08  03 00 00 02  03 00 00 08  02 00 00 02
|   00 00 00 08  04 00 00 05  02 00 00 28  08 01 00 04
|   03 00 00 08  01 00 00 03  03 00 00 08  03 00 00 01
|   03 00 00 08  02 00 00 01  00 00 00 08  04 00 00 05
|   02 00 00 28  09 01 00 04  03 00 00 08  01 00 00 03
|   03 00 00 08  03 00 00 02  03 00 00 08  02 00 00 02
|   00 00 00 08  04 00 00 02  02 00 00 28  0a 01 00 04
|   03 00 00 08  01 00 00 03  03 00 00 08  03 00 00 01
|   03 00 00 08  02 00 00 01  00 00 00 08  04 00 00 02
|   02 00 00 2c  0b 01 00 04  03 00 00 0c  01 00 00 0c
|   80 0e 00 80  03 00 00 08  03 00 00 02  03 00 00 08
|   02 00 00 02  00 00 00 08  04 00 00 02  00 00 00 2c
|   0c 01 00 04  03 00 00 0c  01 00 00 0c  80 0e 00 80
|   03 00 00 08  03 00 00 01  03 00 00 08  02 00 00 01
|   00 00 00 08  04 00 00 02  28 00 01 08  00 0e 00 00
|   3d a6 6a 81  e2 92 09 be  18 4f a0 1e  5c ed ea 7c
|   7d 7b 3a 21  3e 15 0d 53  5d 17 6a be  1b c5 70 ab
|   34 47 bc 09  14 7c aa 91  9c 8f 81 dc  1e f9 87 cd
|   6a ec fa f3  a5 9e 37 bc  ac 3d fd e1  32 8e e8 b3
|   fe d3 8b f4  7b 50 34 13  33 7a 93 ea  e9 3c 0e 8b
|   bd 48 18 9c  9e 03 70 f2  55 ce 45 22  9f c7 c9 48
|   43 a3 e2 64  b5 5d 43 38  c8 fe f1 d3  06 43 f0 0a
|   e8 6d 61 8c  60 78 d9 98  d3 1b 3b 5e  f5 a6 e8 2f
|   ef 56 ac b4  33 bd 1e 62  b2 3e 0b 17  af 6c b8 31
|   08 d7 19 5a  7b c4 54 c2  13 47 98 c2  cc d2 16 29
|   75 6c 03 fb  1e 9c 9d 21  0c a1 e6 c2  f3 f2 49 2c
|   f6 06 73 c1  96 1e ce 58  81 01 1c cb  16 dc f9 fc
|   c7 93 08 75  58 16 57 71  69 96 66 b7  a9 81 7f f7
|   37 4d 7c 41  38 62 a6 39  00 81 ca 3d  1d fc f7 b5
|   08 38 d4 34  70 22 6c 21  d2 5b 20 a1  d2 ba 2a d1
|   89 f3 20 79  ce ac 1e c2  ec 7d ae 76  94 40 39 a0
|   2b 00 00 14  20 98 9d 37  a8 14 a6 4d  8f f0 7c 08
|   d3 20 e9 e3  00 00 00 10  4f 45 70 6c  75 74 6f 75
|   6e 69 74 30
|  processing version=2.0 packet with exchange type=ISAKMP_v2_SA_INIT (34), msgid: 00000000
| I am IKE SA Responder
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  00 00 00 00  00 00 00 00
| state hash entry 4
| v2 state object not found
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  00 00 00 00  00 00 00 00
| state hash entry 4
| v2 state object not found
| considering state entry: 0
|   reject:state needed and state unavailable
| considering state entry: 1
|   reject:state needed and state unavailable
| considering state entry: 2
|   reject:state needed and state unavailable
| considering state entry: 3
| Now lets proceed with state specific processing
| find_host_connection2 called from ikev2parent_inI1outR1, me=132.213.238.7:500 him=192.168.1.1:500 policy=IKEv2ALLOW/-
| find_host_pair: looking for me=132.213.238.7:500 %address him=192.168.1.1:500 any-match
| find_host_pair: comparing to me=132.213.238.7:500 %address him=192.168.1.1:500
| find_host_pair: concluded with parker1--jj2
| found_host_pair_conn (find_host_connection2): 132.213.238.7:500 %address/192.168.1.1:500 -> hp:parker1--jj2
| searching for connection with policy = IKEv2ALLOW/-
| found policy = RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+IKEv2Init+SAREFTRACK (parker1--jj2)
| find_host_connection2 returns parker1--jj2 (ike=none/none)
./rekeyikev2-R1 tentatively considering connection: parker1--jj2
| creating state object #1 at Z
| orient parker1--jj2 checking against if: eth0 (AF_INET:132.213.238.7:500)
|     orient matched on IP
|   orient parker1--jj2 finished with: 1 [132.213.238.7]
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| inserting state object #1 bucket: 28
| will not send/process a dcookie
| **emit ISAKMP Message:
|    initiator cookie:
|   80 01 02 03  04 05 06 07
|    responder cookie:
|   de bc 58 3a  8f 40 d0 cf
|    next payload type: ISAKMP_NEXT_v2SA
|    ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996)
|    exchange type: ISAKMP_v2_SA_INIT
|    flags: ISAKMP_FLAG_RESPONSE
|    message ID:  00 00 00 00
| ***emit IKEv2 Security Association Payload:
|    next payload type: ISAKMP_NEXT_v2KE
|    critical bit: none
| ****emit IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    prop #: 1
|    proto ID: 1
|    spi size: 0
|    # transforms: 4
| *****emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 1
|    transform ID: 12
| ******emit IKEv2 Attribute Substructure Payload:
|    af+type: KEY_LENGTH
|    length/value: 128
|     [128 is 128??]
| emitting length of IKEv2 Transform Substructure Payload: 12
| *****emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 3
|    transform ID: 2
| emitting length of IKEv2 Transform Substructure Payload: 8
| *****emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 2
|    transform ID: 2
| emitting length of IKEv2 Transform Substructure Payload: 8
| *****emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    transform type: 4
|    transform ID: 14
| emitting length of IKEv2 Transform Substructure Payload: 8
| emitting length of IKEv2 Proposal Substructure Payload: 44
| emitting length of IKEv2 Security Association Payload: 48
| ***emit IKEv2 Key Exchange Payload:
|    next payload type: ISAKMP_NEXT_v2Ni
|    critical bit: none
|    transform type: 14
| emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload
| ikev2 g^x  a5 9a 13 6c  b8 87 48 57  e1 22 6e a0  b8 55 c2 00
|   31 15 65 84  8b f9 dc a4  5f 49 d4 c5  f0 98 8e 9b
|   31 85 6e 27  5a c2 75 09  07 37 05 b5  b1 53 18 07
|   81 e8 1d 07  c6 19 1c de  dc 1f 2c 26  d2 0b 59 f9
|   67 6a ee 3c  e5 fa 72 3f  54 96 1e 7d  8e d0 30 08
|   0b ed 95 b0  65 2f 5c a6  36 7e 92 2d  da cb 88 54
|   e3 97 fa 16  6f 9e 7c a6  0c 43 2f 29  be 2c a4 55
|   68 01 45 bc  56 a9 84 b9  2b 1b bf 9a  fc 84 67 5f
|   d3 04 79 90  b7 fa 89 5b  04 06 d5 9a  50 92 16 4b
|   d6 33 40 be  2a 44 94 74  33 a7 a5 c1  1f 88 5b eb
|   4e d2 bb 94  b9 22 db e3  b6 5a 8c f9  d6 43 5d 5e
|   5d c9 19 b8  c8 81 53 01  95 09 02 7b  c0 2a b0 c8
|   5d 2c 69 78  6c e8 f6 5d  e4 90 43 83  fd f7 98 5e
|   cc 92 5c 79  7b 62 ae 98  db 4f 7f e0  68 7c cd 29
|   69 0a ad a3  e8 37 d7 41  b4 79 b3 a5  38 a2 8d a0
|   69 ff bd aa  ba d5 54 70  40 ab b5 fc  26 6d ae ce
| emitting length of IKEv2 Key Exchange Payload: 264
| ***emit IKEv2 Nonce Payload:
|    next payload type: ISAKMP_NEXT_v2V
|    critical bit: none
| emitting 16 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload
| IKEv2 nonce  c6 ba 31 9f  88 5b e7 b7  a2 93 85 dc  bb c6 15 84
| emitting length of IKEv2 Nonce Payload: 20
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE
| emitting 12 raw bytes of Vendor ID into ISAKMP Vendor ID Payload
| Vendor ID  4f 45 70 6c  75 74 6f 75  6e 69 74 30
| emitting length of ISAKMP Vendor ID Payload: 16
| emitting length of ISAKMP Message: 376
| complete v2 state transition with STF_OK
./rekeyikev2-R1 transition from state STATE_IKEv2_START to state STATE_PARENT_R1
./rekeyikev2-R1 STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=aes_128 integ=sha1_96 prf=oakley_sha group=modp2048} (msgid: 00000000)
| sending reply packet to 192.168.1.1:500 (from port 500)
sending 376 bytes for STATE_IKEv2_START through eth0:500 to 192.168.1.1:500 (using #1)
|   80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   21 20 22 20  00 00 00 00  00 00 01 78  22 00 00 30
|   00 00 00 2c  01 01 00 04  03 00 00 0c  01 00 00 0c
|   80 0e 00 80  03 00 00 08  03 00 00 02  03 00 00 08
|   02 00 00 02  00 00 00 08  04 00 00 0e  28 00 01 08
|   00 0e 00 00  a5 9a 13 6c  b8 87 48 57  e1 22 6e a0
|   b8 55 c2 00  31 15 65 84  8b f9 dc a4  5f 49 d4 c5
|   f0 98 8e 9b  31 85 6e 27  5a c2 75 09  07 37 05 b5
|   b1 53 18 07  81 e8 1d 07  c6 19 1c de  dc 1f 2c 26
|   d2 0b 59 f9  67 6a ee 3c  e5 fa 72 3f  54 96 1e 7d
|   8e d0 30 08  0b ed 95 b0  65 2f 5c a6  36 7e 92 2d
|   da cb 88 54  e3 97 fa 16  6f 9e 7c a6  0c 43 2f 29
|   be 2c a4 55  68 01 45 bc  56 a9 84 b9  2b 1b bf 9a
|   fc 84 67 5f  d3 04 79 90  b7 fa 89 5b  04 06 d5 9a
|   50 92 16 4b  d6 33 40 be  2a 44 94 74  33 a7 a5 c1
|   1f 88 5b eb  4e d2 bb 94  b9 22 db e3  b6 5a 8c f9
|   d6 43 5d 5e  5d c9 19 b8  c8 81 53 01  95 09 02 7b
|   c0 2a b0 c8  5d 2c 69 78  6c e8 f6 5d  e4 90 43 83
|   fd f7 98 5e  cc 92 5c 79  7b 62 ae 98  db 4f 7f e0
|   68 7c cd 29  69 0a ad a3  e8 37 d7 41  b4 79 b3 a5
|   38 a2 8d a0  69 ff bd aa  ba d5 54 70  40 ab b5 fc
|   26 6d ae ce  2b 00 00 14  c6 ba 31 9f  88 5b e7 b7
|   a2 93 85 dc  bb c6 15 84  00 00 00 10  4f 45 70 6c
|   75 74 6f 75  6e 69 74 30
1: input from ../lp12-parentR2/parentI2.pcap
| *received 556 bytes from 192.168.1.1:500 on eth0 (port=500)
|   80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 23 08  00 00 00 01  00 00 02 2c  23 00 02 10
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   bc 35 37 b7  f3 29 8d 7f  0e 4a 2b b3  5d 29 2d b7
|   23 65 2e b5  89 be 6c b5  1e a6 e8 51  7b 82 bc 62
|   c6 2c 43 c6  ae 0f ec 1a  69 62 67 2e  9a c5 dd 37
|   12 23 a6 b7  de 53 97 61  34 05 0e 5c  b1 64 2c 98
|   e9 d9 a9 bc  39 23 84 2e  eb 15 07 fa  8b a9 6f 4c
|   b8 09 d0 ed  bd bb b3 10  5e f9 cb 1b  08 8c c3 e9
|   ae 83 3a 41  c5 c6 42 f7  a3 83 87 36  cf 53 1e b7
|   ef b6 46 fa  21 e6 56 f8  e0 02 03 41  6e d4 a5 c9
|   5f 0a 07 28  a3 c7 0d 34  05 18 a5 e0  92 10 8d 6a
|   20 0f c5 6a  9b f5 29 20  2a 3c 87 bd  49 8e 01 43
|   4b 41 ce 20  55 e2 26 20  0f f8 4b bf  ee 30 b4 ad
|   7f a3 bb dd  2e 12 6d 54  e8 2c 81 44  e5 da cd 62
|   59 f9 9f 21  d9 42 aa 59  c9 28 ef 49  86 a7 ab e1
|   32 06 d3 28  5d ad 51 24  8a da 15 fc  e9 31 7c f7
|   52 db a6 a5  11 8a c7 1e  53 02 e5 29  3b 74 e4 59
|   60 16 3a 64  dd 54 cf 5f  0d 57 1c 1c  5e ef ab 90
|   46 69 5e 24  e9 1d f5 eb  de 89 18 38  7e e1 1d 68
|   75 fb 84 4b  f6 c9 75 1f  c5 85 e6 e8  17 65 80 5e
|   58 be 1c a8  f7 4e e7 df  7f 2a e5 81  2a d9 d4 f2
|   09 45 fc da  44 c4 53 5a  a7 ae af 10  c3 59 ea c6
|   5e 39 03 96  53 27 fe 52  df 7d f9 97  a4 2b 43 0a
|   29 fb 70 71  eb 47 b4 ab  0c 68 cf af  e4 f7 f6 be
|   27 b5 7e 30  d6 95 98 25  4a 07 1c 45  70 14 98 83
|   ab c8 29 7b  fd 86 44 b4  bc 4e a2 ef  96 16 7c 37
|   ef 8a d3 e6  07 41 a1 a3  9e 27 e4 65  ed 05 09 f0
|   4c fc 78 b3  3a fb da 6a  43 b1 70 87  a4 94 3c d4
|   87 76 c4 9a  28 16 4d a0  42 c6 55 0a  e6 75 df 23
|   b6 a1 4e b7  6b 3c 35 54  09 20 48 e3  25 5d 31 d3
|   04 07 84 ff  70 d1 8f 1b  14 83 0d 09  14 e1 a2 60
|   ee 9b 99 56  10 11 d4 62  ec 13 7c c8  ff 25 00 be
|   d3 11 ff 52  18 90 c1 47  e3 6c 1d 54  b6 13 e8 b7
|   30 a6 4f 50  60 8d ac 6d  e3 5c 72 84
|  processing version=2.0 packet with exchange type=ISAKMP_v2_AUTH (35), msgid: 00000001
| I am IKE SA Responder
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| v2 state object not found
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| v2 peer and cookies match on #1
| v2 state object #1 (parker1--jj2) found, in STATE_PARENT_R1
| state found and its state is:STATE_PARENT_R1 msgid: 00001
| considering state entry: 0
|   reject: in state: STATE_PARENT_R1, needs STATE_PARENT_I1
| considering state entry: 1
|   reject: in state: STATE_PARENT_R1, needs STATE_PARENT_I1
| considering state entry: 2
|   reject: in state: STATE_PARENT_R1, needs STATE_PARENT_I2
| considering state entry: 3
|   reject:state unneeded and state available
| considering state entry: 4
| Now lets proceed with state specific processing
| ikev2 parent inI2outR2: calculating g^{xy} in order to decrypt I2
| ikev2 parent SA details
| ikev2 I 0x8001020304050607 0xdebc583a8f40d0cf sha1:0x4ea8e662b07cdd430f6944c6723e4b82d5722418 aes128:0x3f44bf47cafd8150591deb088199fcbf
| ikev2 R 0x8001020304050607 0xdebc583a8f40d0cf sha1:0x515b0bd22e6d76b34fdb760aa7bfad80b109b75d aes128:0xbedb67ec7dc3d00cccac42e70cd63bde
| data being hmac:  80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 23 08  00 00 00 01  00 00 02 2c  23 00 02 10
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   bc 35 37 b7  f3 29 8d 7f  0e 4a 2b b3  5d 29 2d b7
|   23 65 2e b5  89 be 6c b5  1e a6 e8 51  7b 82 bc 62
|   c6 2c 43 c6  ae 0f ec 1a  69 62 67 2e  9a c5 dd 37
|   12 23 a6 b7  de 53 97 61  34 05 0e 5c  b1 64 2c 98
|   e9 d9 a9 bc  39 23 84 2e  eb 15 07 fa  8b a9 6f 4c
|   b8 09 d0 ed  bd bb b3 10  5e f9 cb 1b  08 8c c3 e9
|   ae 83 3a 41  c5 c6 42 f7  a3 83 87 36  cf 53 1e b7
|   ef b6 46 fa  21 e6 56 f8  e0 02 03 41  6e d4 a5 c9
|   5f 0a 07 28  a3 c7 0d 34  05 18 a5 e0  92 10 8d 6a
|   20 0f c5 6a  9b f5 29 20  2a 3c 87 bd  49 8e 01 43
|   4b 41 ce 20  55 e2 26 20  0f f8 4b bf  ee 30 b4 ad
|   7f a3 bb dd  2e 12 6d 54  e8 2c 81 44  e5 da cd 62
|   59 f9 9f 21  d9 42 aa 59  c9 28 ef 49  86 a7 ab e1
|   32 06 d3 28  5d ad 51 24  8a da 15 fc  e9 31 7c f7
|   52 db a6 a5  11 8a c7 1e  53 02 e5 29  3b 74 e4 59
|   60 16 3a 64  dd 54 cf 5f  0d 57 1c 1c  5e ef ab 90
|   46 69 5e 24  e9 1d f5 eb  de 89 18 38  7e e1 1d 68
|   75 fb 84 4b  f6 c9 75 1f  c5 85 e6 e8  17 65 80 5e
|   58 be 1c a8  f7 4e e7 df  7f 2a e5 81  2a d9 d4 f2
|   09 45 fc da  44 c4 53 5a  a7 ae af 10  c3 59 ea c6
|   5e 39 03 96  53 27 fe 52  df 7d f9 97  a4 2b 43 0a
|   29 fb 70 71  eb 47 b4 ab  0c 68 cf af  e4 f7 f6 be
|   27 b5 7e 30  d6 95 98 25  4a 07 1c 45  70 14 98 83
|   ab c8 29 7b  fd 86 44 b4  bc 4e a2 ef  96 16 7c 37
|   ef 8a d3 e6  07 41 a1 a3  9e 27 e4 65  ed 05 09 f0
|   4c fc 78 b3  3a fb da 6a  43 b1 70 87  a4 94 3c d4
|   87 76 c4 9a  28 16 4d a0  42 c6 55 0a  e6 75 df 23
|   b6 a1 4e b7  6b 3c 35 54  09 20 48 e3  25 5d 31 d3
|   04 07 84 ff  70 d1 8f 1b  14 83 0d 09  14 e1 a2 60
|   ee 9b 99 56  10 11 d4 62  ec 13 7c c8  ff 25 00 be
|   d3 11 ff 52  18 90 c1 47  e3 6c 1d 54  b6 13 e8 b7
| R2 calculated auth:  30 a6 4f 50  60 8d ac 6d  e3 5c 72 84
| R2  provided  auth:  30 a6 4f 50  60 8d ac 6d  e3 5c 72 84
| authenticator matched, np=35
| data before decryption:
|   bc 35 37 b7  f3 29 8d 7f  0e 4a 2b b3  5d 29 2d b7
|   23 65 2e b5  89 be 6c b5  1e a6 e8 51  7b 82 bc 62
|   c6 2c 43 c6  ae 0f ec 1a  69 62 67 2e  9a c5 dd 37
|   12 23 a6 b7  de 53 97 61  34 05 0e 5c  b1 64 2c 98
|   e9 d9 a9 bc  39 23 84 2e  eb 15 07 fa  8b a9 6f 4c
|   b8 09 d0 ed  bd bb b3 10  5e f9 cb 1b  08 8c c3 e9
|   ae 83 3a 41  c5 c6 42 f7  a3 83 87 36  cf 53 1e b7
|   ef b6 46 fa  21 e6 56 f8  e0 02 03 41  6e d4 a5 c9
|   5f 0a 07 28  a3 c7 0d 34  05 18 a5 e0  92 10 8d 6a
|   20 0f c5 6a  9b f5 29 20  2a 3c 87 bd  49 8e 01 43
|   4b 41 ce 20  55 e2 26 20  0f f8 4b bf  ee 30 b4 ad
|   7f a3 bb dd  2e 12 6d 54  e8 2c 81 44  e5 da cd 62
|   59 f9 9f 21  d9 42 aa 59  c9 28 ef 49  86 a7 ab e1
|   32 06 d3 28  5d ad 51 24  8a da 15 fc  e9 31 7c f7
|   52 db a6 a5  11 8a c7 1e  53 02 e5 29  3b 74 e4 59
|   60 16 3a 64  dd 54 cf 5f  0d 57 1c 1c  5e ef ab 90
|   46 69 5e 24  e9 1d f5 eb  de 89 18 38  7e e1 1d 68
|   75 fb 84 4b  f6 c9 75 1f  c5 85 e6 e8  17 65 80 5e
|   58 be 1c a8  f7 4e e7 df  7f 2a e5 81  2a d9 d4 f2
|   09 45 fc da  44 c4 53 5a  a7 ae af 10  c3 59 ea c6
|   5e 39 03 96  53 27 fe 52  df 7d f9 97  a4 2b 43 0a
|   29 fb 70 71  eb 47 b4 ab  0c 68 cf af  e4 f7 f6 be
|   27 b5 7e 30  d6 95 98 25  4a 07 1c 45  70 14 98 83
|   ab c8 29 7b  fd 86 44 b4  bc 4e a2 ef  96 16 7c 37
|   ef 8a d3 e6  07 41 a1 a3  9e 27 e4 65  ed 05 09 f0
|   4c fc 78 b3  3a fb da 6a  43 b1 70 87  a4 94 3c d4
|   87 76 c4 9a  28 16 4d a0  42 c6 55 0a  e6 75 df 23
|   b6 a1 4e b7  6b 3c 35 54  09 20 48 e3  25 5d 31 d3
|   04 07 84 ff  70 d1 8f 1b  14 83 0d 09  14 e1 a2 60
|   ee 9b 99 56  10 11 d4 62  ec 13 7c c8  ff 25 00 be
|   d3 11 ff 52  18 90 c1 47  e3 6c 1d 54  b6 13 e8 b7
| decrypted payload:  27 00 00 22  02 00 00 00  70 61 72 6b  65 72 30 31
|   2e 65 6d 6d  6a 61 79 2e  63 72 65 64  69 6c 2e 6f
|   72 67 21 00  00 c8 01 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 2c 00  00 9c 02 00
|   00 28 01 03  04 03 12 34  56 78 03 00  00 0c 01 00
|   00 0c 80 0e  00 80 03 00  00 08 03 00  00 02 00 00
|   00 08 05 00  00 00 02 00  00 28 02 03  04 03 12 34
|   56 78 03 00  00 0c 01 00  00 0c 80 0e  00 80 03 00
|   00 08 03 00  00 01 00 00  00 08 05 00  00 00 02 00
|   00 24 03 03  04 03 12 34  56 78 03 00  00 08 01 00
|   00 03 03 00  00 08 03 00  00 02 00 00  00 08 05 00
|   00 00 00 00  00 24 04 03  04 03 12 34  56 78 03 00
|   00 08 01 00  00 03 03 00  00 08 03 00  00 01 00 00
|   00 08 05 00  00 00 2d 00  00 30 01 00  00 00 08 00
|   00 28 00 00  ff ff fd 68  c9 f9 41 57  00 02 00 00
|   00 01 00 00  00 00 fd 68  c9 f9 41 57  00 02 00 00
|   00 01 ff ff  ff ff 00 00  00 30 01 00  00 00 08 00
|   00 28 00 00  ff ff fd 68  c9 f9 41 57  00 00 00 00
|   00 00 00 00  00 00 fd 68  c9 f9 41 57  00 00 ff ff
|   ff ff ff ff  ff ff 00 01  02 03 04 05  06 07 08 09
| striping 10 bytes as pad
| **parse IKEv2 Identification Payload:
|    next payload type: ISAKMP_NEXT_v2AUTH
|    critical bit: none
|    length: 34
|    id_type: ID_FQDN
| processing payload: ISAKMP_NEXT_v2IDi (len=34)
| **parse IKEv2 Authentication Payload:
|    next payload type: ISAKMP_NEXT_v2SA
|    critical bit: none
|    length: 200
|    auth method: v2_AUTH_RSA
| processing payload: ISAKMP_NEXT_v2AUTH (len=200)
| **parse IKEv2 Security Association Payload:
|    next payload type: ISAKMP_NEXT_v2TSi
|    critical bit: none
|    length: 156
| processing payload: ISAKMP_NEXT_v2SA (len=156)
| **parse IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_v2TSr
|    critical bit: none
|    length: 48
|    number of TS: 1
| processing payload: ISAKMP_NEXT_v2TSi (len=48)
| **parse IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    critical bit: none
|    length: 48
|    number of TS: 1
| processing payload: ISAKMP_NEXT_v2TSr (len=48)
./rekeyikev2-R1 IKEv2 mode peer ID is ID_FQDN: '@parker01.emmjay.credil.org'
| find_ID_host_pair: looking for me=(none) him=@parker01.emmjay.credil.org (wildcard)
|                   comparing to me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (parker1--jj2)
|   concluded with parker1--jj2
| idhash verify pi  cc 07 97 44  b4 a3 4e 8a  0d 2f 27 8b  ee 06 6d 07
|   a5 a5 75 2e
| idhash verify I2  02 00 00 00  70 61 72 6b  65 72 30 31  2e 65 6d 6d
|   6a 61 79 2e  63 72 65 64  69 6c 2e 6f  72 67
| ikev2 verify required CA is '%any'
| checking alg=1 == 1, keyid=@parker01.emmjay.credil.org same_id=1
|   trusted_ca called with a=(empty) b=(empty)
| key issuer CA is '%any'
| PARENT SA now authenticated, building child and reply
| **emit ISAKMP Message:
|    initiator cookie:
|   80 01 02 03  04 05 06 07
|    responder cookie:
|   de bc 58 3a  8f 40 d0 cf
|    next payload type: ISAKMP_NEXT_v2E
|    ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996)
|    exchange type: ISAKMP_v2_AUTH
|    flags: ISAKMP_FLAG_RESPONSE
|    message ID:  00 00 00 01
| ***emit IKEv2 Encryption Payload:
|    next payload type: ISAKMP_NEXT_v2IDr
|    critical bit: none
| emitting 16 zero bytes of iv into IKEv2 Encryption Payload
| IKEv2 thinking whether to send my certificate:
|  my policy has  RSASIG, the policy is : RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+IKEv2Init+SAREFTRACK
|  sendcert: CERT_ALWAYSSEND and I did not get a certificate request
|  so do not send cert.
| I did not send a certificate because I do not have one.
| *****emit IKEv2 Identification Payload:
|    next payload type: ISAKMP_NEXT_v2AUTH
|    critical bit: none
|    id_type: ID_FQDN
| emitting 30 raw bytes of my identity into IKEv2 Identification Payload
| my identity  6a 61 6d 65  73 6a 6f 68  6e 73 6f 6e  2e 65 6d 6d
|   6a 61 79 2e  63 72 65 64  69 6c 2e 6f  72 67
| emitting length of IKEv2 Identification Payload: 38
| idhash calc pr  e9 00 11 7e  41 d4 31 62  40 b8 63 22  bf 06 9f bc
|   eb 81 58 e7
| idhash calc R2  02 00 00 00  6a 61 6d 65  73 6a 6f 68  6e 73 6f 6e
|   2e 65 6d 6d  6a 61 79 2e  63 72 65 64  69 6c 2e 6f
|   72 67
| assembled IDr payload -- CERT next
| CHILD SA proposals received
| going to assemble AUTH payload
| *****emit IKEv2 Authentication Payload:
|    next payload type: ISAKMP_NEXT_v2SA
|    critical bit: none
|    auth method: v2_AUTH_RSA
| emitting 192 zero bytes of fake rsa sig into IKEv2 Authentication Payload
| emitting length of IKEv2 Authentication Payload: 200
| ***parse IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    length: 40
|    start port: 0
|    end port: 65535
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 02  00 00 00 01  00 00 00 00
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 02  00 00 00 01  ff ff ff ff
| ***parse IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    length: 40
|    start port: 0
|    end port: 65535
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 00  00 00 00 00  00 00 00 00
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 00  ff ff ff ff  ff ff ff ff
| ikev2_evaluate_connection_fit, evaluating base fit for parker1--jj2
|   ikev2_evaluate_connection_fit evaluating our I=parker1--jj2:fd68:c9f9:4157:2:0:1::/96:0/0 R=fd68:c9f9:4157::/64:0/0  to their:
|     tsi[0]=fd68:c9f9:4157:2:0:1::/fd68:c9f9:4157:2:0:1:ffff:ffff proto=0 portrange 0-65535, tsr[0]=fd68:c9f9:4157::/fd68:c9f9:4157:0:ffff:ffff:ffff:ffff proto=0 portrange 0-65535
| ei->port 0  tsi[tsi_ni].startport 0  tsi[tsi_ni].endport 65535
|       has ts_range1=32 maskbits1=96 ts_range2=64 maskbits2=64 fitbits=32896 <> -1
| bfit_n=ikev2_evaluate_connection_fit found better fit c parker1--jj2
|     evaluate_connection_port_fit tsi_n[1], best=-1
|    tsi[0] 0-65535: exact port match with 0.  fitness 65536
|       evaluating_connection_port_fit tsi_n[0], range_i=65536 best=-1
|    tsr[0] 0-65535: exact port match with 0.  fitness 65536
|       evaluating_connection_port_fit tsi_n[0] tsr_n[0], range=65536/65536 best=-1
|     best ports fit so far: tsi[0] fitrange_i 65536, tsr[0] fitrange_r 65536, matchiness 131072
|     port_fitness 131072
| ikev2_evaluate_connection_port_fit found better fit c parker1--jj2, tsi[0],tsr[0]
| find_ID_host_pair: looking for me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (wildcard)
|                   comparing to me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (parker1--jj2)
|   concluded with parker1--jj2
|   checking hostpair fd68:c9f9:4157::/64 -> fd68:c9f9:4157:2:0:1::/96 is found
| ikev2_evaluate_connection_fit, concluded with parker1--jj2
| duplicating state object #1
| creating state object #2 at Z
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| inserting state object #2 bucket: 28
| printing contents struct traffic_selector
|   ts_type: IKEv2_TS_IPV6_ADDR_RANGE
|   ipprotoid: 0
|   startport: 0
|   endport: 65535
|   ip low: fd68:c9f9:4157::
|   ip high: fd68:c9f9:4157:0:ffff:ffff:ffff:ffff
| printing contents struct traffic_selector
|   ts_type: IKEv2_TS_IPV6_ADDR_RANGE
|   ipprotoid: 0
|   startport: 0
|   endport: 65535
|   ip low: fd68:c9f9:4157:2:0:1::
|   ip high: fd68:c9f9:4157:2:0:1:ffff:ffff
| *****emit IKEv2 Security Association Payload:
|    next payload type: ISAKMP_NEXT_v2TSi
|    critical bit: none
| empty esp_info, returning defaults
| ***parse IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_P
|    length: 40
|    prop #: 1
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| parsing 4 raw bytes of IKEv2 Proposal Substructure Payload into CHILD SA SPI
| CHILD SA SPI  12 34 56 78
| SPI received: 12345678
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    length: 12
|    transform type: 1
|    transform ID: 12
| *****parse IKEv2 Attribute Substructure Payload:
|    af+type: KEY_LENGTH
|    length/value: 128
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    length: 8
|    transform type: 3
|    transform ID: 2
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    length: 8
|    transform type: 5
|    transform ID: 0
| ***parse IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_P
|    length: 40
|    prop #: 2
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| parsing 4 raw bytes of IKEv2 Proposal Substructure Payload into CHILD SA SPI
| CHILD SA SPI  12 34 56 78
| SPI received: 12345678
| ******emit IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    prop #: 1
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| emitting 4 raw bytes of our spi into IKEv2 Proposal Substructure Payload
| our spi  12 34 56 78
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 1
|    transform ID: 12
| ********emit IKEv2 Attribute Substructure Payload:
|    af+type: KEY_LENGTH
|    length/value: 128
|     [128 is 128??]
| emitting length of IKEv2 Transform Substructure Payload: 12
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 3
|    transform ID: 2
| emitting length of IKEv2 Transform Substructure Payload: 8
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    transform type: 5
|    transform ID: 0
| emitting length of IKEv2 Transform Substructure Payload: 8
| emitting length of IKEv2 Proposal Substructure Payload: 40
| emitting length of IKEv2 Security Association Payload: 44
| *****emit IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_v2TSr
|    critical bit: none
|    number of TS: 1
| ******emit IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    start port: 0
|    end port: 65535
| emitting 16 raw bytes of ipv6 low into IKEv2 Traffic Selector
| ipv6 low  fd 68 c9 f9  41 57 00 02  00 00 00 01  00 00 00 00
| emitting 16 raw bytes of ipv6 high into IKEv2 Traffic Selector
| ipv6 high  fd 68 c9 f9  41 57 00 02  00 00 00 01  ff ff ff ff
| emitting length of IKEv2 Traffic Selector: 40
| emitting length of IKEv2 Traffic Selector Payload: 48
| *****emit IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    critical bit: none
|    number of TS: 1
| ******emit IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    start port: 0
|    end port: 65535
| emitting 16 raw bytes of ipv6 low into IKEv2 Traffic Selector
| ipv6 low  fd 68 c9 f9  41 57 00 00  00 00 00 00  00 00 00 00
| emitting 16 raw bytes of ipv6 high into IKEv2 Traffic Selector
| ipv6 high  fd 68 c9 f9  41 57 00 00  ff ff ff ff  ff ff ff ff
| emitting length of IKEv2 Traffic Selector: 40
| emitting length of IKEv2 Traffic Selector Payload: 48
| prf+[1]:  f1 a3 5e 87  c7 70 88 01  b6 81 3d 59  56 99 8e be
|   1a 76 a5 e4
| prf+[2]:  c3 2c d0 f3  83 3d 8f 24  1e 8f 86 2a  2a 58 ce d8
|   0f 77 b6 4a
| prf+[3]:  6f 3d 81 fb  39 51 57 a1  df 92 21 c8  77 8f 8f 07
|   5c ee d5 26
| prf+[4]:  1e 9f 3d b0  17 f3 f7 fc  e8 5e 55 44  63 f0 30 94
|   2f 4e 11 2a
| our  keymat  f1 a3 5e 87  c7 70 88 01  b6 81 3d 59  56 99 8e be
|   1a 76 a5 e4  c3 2c d0 f3  83 3d 8f 24  1e 8f 86 2a
|   2a 58 ce d8
| peer keymat  0f 77 b6 4a  6f 3d 81 fb  39 51 57 a1  df 92 21 c8
|   77 8f 8f 07  5c ee d5 26  1e 9f 3d b0  17 f3 f7 fc
|   e8 5e 55 44
| emitting 6 raw bytes of padding and length into cleartext
| padding and length  00 01 02 03  04 05
| emitting 12 zero bytes of length of truncated HMAC into IKEv2 Encryption Payload
| emitting length of IKEv2 Encryption Payload: 416
| emitting length of ISAKMP Message: 444
| data before encryption:
|   27 00 00 26  02 00 00 00  6a 61 6d 65  73 6a 6f 68
|   6e 73 6f 6e  2e 65 6d 6d  6a 61 79 2e  63 72 65 64
|   69 6c 2e 6f  72 67 21 00  00 c8 01 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00
|   00 00 00 00  00 00 00 00  00 00 00 00  00 00 2c 00
|   00 2c 00 00  00 28 01 03  04 03 12 34  56 78 03 00
|   00 0c 01 00  00 0c 80 0e  00 80 03 00  00 08 03 00
|   00 02 00 00  00 08 05 00  00 00 2d 00  00 30 01 00
|   00 00 08 00  00 28 00 00  ff ff fd 68  c9 f9 41 57
|   00 02 00 00  00 01 00 00  00 00 fd 68  c9 f9 41 57
|   00 02 00 00  00 01 ff ff  ff ff 00 00  00 30 01 00
|   00 00 08 00  00 28 00 00  ff ff fd 68  c9 f9 41 57
|   00 00 00 00  00 00 00 00  00 00 fd 68  c9 f9 41 57
|   00 00 ff ff  ff ff ff ff  ff ff 00 01  02 03 04 05
| data after encryption:
|   eb ff 97 78  70 72 7e b3  64 db c7 fe  e4 69 0f 92
|   2a dd bb d8  41 fc d0 3e  5c 5a 07 57  fd e7 7d 8a
|   c1 fc 19 db  f7 a0 0a 58  95 e0 43 74  1f 5e e0 33
|   f2 06 29 c9  8d 3e 52 00  37 22 20 6c  47 af 94 1c
|   6a 93 b3 97  1f ff 5c 1b  70 b3 48 6a  c7 5f 27 b3
|   e4 bf e1 17  0e 15 c1 47  77 7b 53 88  6c 4a cb 12
|   d0 82 94 13  cf 66 cc 4c  d8 b2 8e c1  39 07 b9 a5
|   12 f6 e0 69  cb ad 11 c1  e9 58 33 21  a8 bb a9 ec
|   40 9e ba 01  5c 8d e8 04  ac b9 22 b2  c6 ce c8 a9
|   79 a2 02 52  da d8 f7 41  ae 9c 82 85  5f f2 f5 a3
|   3f f7 09 de  d6 e7 31 43  51 69 8f 8d  fa 0b 41 e6
|   d8 07 00 68  9e b7 92 3d  47 93 37 e6  14 e0 48 0d
|   bb 1d 13 08  66 5d 87 c4  86 8a 38 f3  05 57 97 5c
|   e1 dc 5c ac  36 b4 e1 93  68 57 da 98  6c 69 99 c3
|   2a b8 60 09  8f 1f d2 d0  27 0b e5 b8  bf 6b e2 83
|   5d af f9 88  7c 09 47 32  c7 c7 72 61  b0 29 20 0b
|   a1 79 22 95  8b 5f 46 ab  30 48 6c 4f  21 93 99 84
|   14 f4 c8 bc  fa 9b cf 92  69 69 86 55  7b 4e c6 b3
|   bb 68 e6 d1  3b ed 7c 9e  1c 96 d1 cc  e2 ec cb c2
|   e2 fc d5 60  ce 12 9f 9f  0e 65 a0 54  fb 44 4d 33
|   2d 5c 31 47  f5 95 a8 ca  70 81 d2 ee  9f 04 9b 9b
|   5a 3c 92 93  70 80 1e 90  1c d5 c4 5b  79 be 96 94
|   fe 3e e9 26  40 48 ae 09  00 c4 47 35  2e b1 6c c4
|   a0 ef fd 33  7a 65 05 55  d1 ff c0 9a  b0 a2 7f fb
| data being hmac:  80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 23 20  00 00 00 01  00 00 01 bc  24 00 01 a0
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   eb ff 97 78  70 72 7e b3  64 db c7 fe  e4 69 0f 92
|   2a dd bb d8  41 fc d0 3e  5c 5a 07 57  fd e7 7d 8a
|   c1 fc 19 db  f7 a0 0a 58  95 e0 43 74  1f 5e e0 33
|   f2 06 29 c9  8d 3e 52 00  37 22 20 6c  47 af 94 1c
|   6a 93 b3 97  1f ff 5c 1b  70 b3 48 6a  c7 5f 27 b3
|   e4 bf e1 17  0e 15 c1 47  77 7b 53 88  6c 4a cb 12
|   d0 82 94 13  cf 66 cc 4c  d8 b2 8e c1  39 07 b9 a5
|   12 f6 e0 69  cb ad 11 c1  e9 58 33 21  a8 bb a9 ec
|   40 9e ba 01  5c 8d e8 04  ac b9 22 b2  c6 ce c8 a9
|   79 a2 02 52  da d8 f7 41  ae 9c 82 85  5f f2 f5 a3
|   3f f7 09 de  d6 e7 31 43  51 69 8f 8d  fa 0b 41 e6
|   d8 07 00 68  9e b7 92 3d  47 93 37 e6  14 e0 48 0d
|   bb 1d 13 08  66 5d 87 c4  86 8a 38 f3  05 57 97 5c
|   e1 dc 5c ac  36 b4 e1 93  68 57 da 98  6c 69 99 c3
|   2a b8 60 09  8f 1f d2 d0  27 0b e5 b8  bf 6b e2 83
|   5d af f9 88  7c 09 47 32  c7 c7 72 61  b0 29 20 0b
|   a1 79 22 95  8b 5f 46 ab  30 48 6c 4f  21 93 99 84
|   14 f4 c8 bc  fa 9b cf 92  69 69 86 55  7b 4e c6 b3
|   bb 68 e6 d1  3b ed 7c 9e  1c 96 d1 cc  e2 ec cb c2
|   e2 fc d5 60  ce 12 9f 9f  0e 65 a0 54  fb 44 4d 33
|   2d 5c 31 47  f5 95 a8 ca  70 81 d2 ee  9f 04 9b 9b
|   5a 3c 92 93  70 80 1e 90  1c d5 c4 5b  79 be 96 94
|   fe 3e e9 26  40 48 ae 09  00 c4 47 35  2e b1 6c c4
|   a0 ef fd 33  7a 65 05 55  d1 ff c0 9a  b0 a2 7f fb
| out calculated auth:
|   2f e8 96 e0  25 30 6d 60  47 f4 91 cc
| complete v2 state transition with STF_OK
./rekeyikev2-R1 transition from state STATE_PARENT_R1 to state STATE_CHILD_C1_KEYED
./rekeyikev2-R1 negotiated tunnel [fd68:c9f9:4157::,fd68:c9f9:4157:0:ffff:ffff:ffff:ffff proto:0 port:0-65535] -> [fd68:c9f9:4157:2:0:1::,fd68:c9f9:4157:2:0:1:ffff:ffff proto:0 port:0-65535]
./rekeyikev2-R1 STATE_CHILD_C1_KEYED: CHILD SA established tunnel mode {ESP=>0x12345678 <0x12345678 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=none} (msgid: 00000000)
| sending reply packet to 192.168.1.1:500 (from port 500)
sending 444 bytes for STATE_PARENT_R1 through eth0:500 to 192.168.1.1:500 (using #2)
|   80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 23 20  00 00 00 01  00 00 01 bc  24 00 01 a0
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   eb ff 97 78  70 72 7e b3  64 db c7 fe  e4 69 0f 92
|   2a dd bb d8  41 fc d0 3e  5c 5a 07 57  fd e7 7d 8a
|   c1 fc 19 db  f7 a0 0a 58  95 e0 43 74  1f 5e e0 33
|   f2 06 29 c9  8d 3e 52 00  37 22 20 6c  47 af 94 1c
|   6a 93 b3 97  1f ff 5c 1b  70 b3 48 6a  c7 5f 27 b3
|   e4 bf e1 17  0e 15 c1 47  77 7b 53 88  6c 4a cb 12
|   d0 82 94 13  cf 66 cc 4c  d8 b2 8e c1  39 07 b9 a5
|   12 f6 e0 69  cb ad 11 c1  e9 58 33 21  a8 bb a9 ec
|   40 9e ba 01  5c 8d e8 04  ac b9 22 b2  c6 ce c8 a9
|   79 a2 02 52  da d8 f7 41  ae 9c 82 85  5f f2 f5 a3
|   3f f7 09 de  d6 e7 31 43  51 69 8f 8d  fa 0b 41 e6
|   d8 07 00 68  9e b7 92 3d  47 93 37 e6  14 e0 48 0d
|   bb 1d 13 08  66 5d 87 c4  86 8a 38 f3  05 57 97 5c
|   e1 dc 5c ac  36 b4 e1 93  68 57 da 98  6c 69 99 c3
|   2a b8 60 09  8f 1f d2 d0  27 0b e5 b8  bf 6b e2 83
|   5d af f9 88  7c 09 47 32  c7 c7 72 61  b0 29 20 0b
|   a1 79 22 95  8b 5f 46 ab  30 48 6c 4f  21 93 99 84
|   14 f4 c8 bc  fa 9b cf 92  69 69 86 55  7b 4e c6 b3
|   bb 68 e6 d1  3b ed 7c 9e  1c 96 d1 cc  e2 ec cb c2
|   e2 fc d5 60  ce 12 9f 9f  0e 65 a0 54  fb 44 4d 33
|   2d 5c 31 47  f5 95 a8 ca  70 81 d2 ee  9f 04 9b 9b
|   5a 3c 92 93  70 80 1e 90  1c d5 c4 5b  79 be 96 94
|   fe 3e e9 26  40 48 ae 09  00 c4 47 35  2e b1 6c c4
|   a0 ef fd 33  7a 65 05 55  d1 ff c0 9a  b0 a2 7f fb
|   2f e8 96 e0  25 30 6d 60  47 f4 91 cc
| releasing whack for #X (sock=Y)
| releasing whack for #X (sock=Y)
2: output to OUTPUT/rekeyikev2-R1.pcap
2: input from rekeyCI1.pcap
| *received 604 bytes from 192.168.1.1:500 on eth0 (port=500)
|   80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 24 09  00 00 00 02  00 00 02 5c  22 00 02 40
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   73 8a 8f 42  ea 98 37 99  13 4b bb 29  ba 1d e2 de
|   2b 85 7a cc  55 e8 fc 4a  3f b2 be 15  1b fc a1 28
|   59 c7 83 3d  1d 3e 87 02  ce d7 61 79  4b 8d 4b c4
|   ff 36 93 7c  92 37 83 fc  5f 16 c2 35  0f 66 12 e2
|   ea 2b 36 dd  d4 8b 0c 3f  c6 f0 0d ac  ba 49 32 cb
|   e0 62 70 92  3b 70 79 bd  44 e6 29 ce  82 2a d6 3c
|   5e 73 62 3f  f7 0e 3e f6  90 67 13 19  70 22 b3 e5
|   da 1b d8 43  aa c4 78 d1  52 37 87 29  cc 15 58 bd
|   83 57 0c 0c  95 9f a0 ba  f2 81 6b 11  f9 4d 29 4f
|   76 df 64 86  21 6a ae 93  ff 31 af 1d  6a 4b b1 2e
|   41 b1 46 99  59 f4 1b ed  e7 65 2f 0d  2b 35 84 62
|   83 be 60 80  94 78 b1 77  6d dc fb 94  27 75 59 5a
|   e6 f1 e8 b0  9a 89 f4 b7  0a 23 17 1c  43 91 f0 6c
|   d7 5e 40 b8  2a 3c 54 57  c3 84 b3 25  28 12 d4 5c
|   53 c3 18 44  21 6b de 28  1d bb b7 23  af 5b 51 05
|   e0 7c 61 26  3a 4a 03 d4  33 57 d8 be  04 05 89 7f
|   09 55 3d 38  5b fb bd 22  b8 40 86 73  97 0b f8 98
|   85 6f 8a c2  fa fc 31 50  00 0d 13 88  66 c9 47 23
|   11 68 7e b2  76 53 5f 4d  47 e0 a0 a4  98 21 b9 88
|   07 f2 dc 02  81 ac 93 92  3a 5c 53 91  03 ac a5 9b
|   e1 5c d6 aa  a3 92 3f 0e  33 21 08 d8  c0 d8 ca d4
|   c8 28 80 99  e5 1a 56 31  3c f8 60 66  9f 8a 8a 19
|   d6 2f 9e 6e  3f f9 4f 01  71 3f de b8  ae 3c 0f 62
|   29 bd c1 84  66 03 43 be  cf 73 6b 70  14 05 ae c7
|   0f a1 d7 f2  f2 98 06 18  e3 38 62 f4  a7 a1 51 d0
|   df 8f f9 b0  24 31 3c fb  50 7c 72 fb  9e e0 c8 8d
|   1b 42 a2 ff  91 71 5c f8  09 59 05 ff  c9 9e 05 56
|   33 29 92 ac  a3 5f ae 07  4b a3 1b 88  47 0e 83 67
|   1d 74 be 28  fb 01 b9 cb  8d ab 8e 56  eb 1d 02 0a
|   09 90 09 09  f5 b5 05 c0  46 e0 9b bf  cb 04 8b e1
|   54 98 74 7d  35 12 fd ce  6a 05 75 97  ad 60 e4 a7
|   6f 97 03 a1  3f 3e 62 72  54 b6 7a 78  85 a7 3d 47
|   36 bf 90 fe  39 a7 8b 65  a5 fe 53 5e  ad 4a a3 99
|   6c 5f f9 e1  f2 06 d9 bc  65 33 0c 10  94 3d b2 50
|   46 a9 39 bb  76 03 01 5b  69 c4 7f 6e
|  processing version=2.0 packet with exchange type=ISAKMP_v2_CHILD_SA (36), msgid: 00000002
| I am IKE SA Responder
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| v2 state object not found
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| v2 peer and cookies match on #1
| v2 state object #1 (parker1--jj2) found, in STATE_PARENT_R2
| state found and its state is:STATE_PARENT_R2 msgid: 00002
| considering state entry: 0
|   reject: in state: STATE_PARENT_R2, needs STATE_PARENT_I1
| considering state entry: 1
|   reject: in state: STATE_PARENT_R2, needs STATE_PARENT_I1
| considering state entry: 2
|   reject: in state: STATE_PARENT_R2, needs STATE_PARENT_I2
| considering state entry: 3
|   reject:state unneeded and state available
| considering state entry: 4
|   reject: in state: STATE_PARENT_R2, needs STATE_PARENT_R1
| considering state entry: 5
|   reject: in state: STATE_PARENT_R2, needs STATE_CHILD_C1_REKEY
| considering state entry: 6
|   reject: in state: STATE_PARENT_R2, needs STATE_CHILD_C1_REKEY
| considering state entry: 7
| Now lets proceed with state specific processing
| duplicating state object #1
| creating state object #3 at Z
| ICOOKIE:  80 01 02 03  04 05 06 07
| RCOOKIE:  de bc 58 3a  8f 40 d0 cf
| state hash entry 28
| inserting state object #3 bucket: 28
| data being hmac:  80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 24 09  00 00 00 02  00 00 02 5c  22 00 02 40
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   73 8a 8f 42  ea 98 37 99  13 4b bb 29  ba 1d e2 de
|   2b 85 7a cc  55 e8 fc 4a  3f b2 be 15  1b fc a1 28
|   59 c7 83 3d  1d 3e 87 02  ce d7 61 79  4b 8d 4b c4
|   ff 36 93 7c  92 37 83 fc  5f 16 c2 35  0f 66 12 e2
|   ea 2b 36 dd  d4 8b 0c 3f  c6 f0 0d ac  ba 49 32 cb
|   e0 62 70 92  3b 70 79 bd  44 e6 29 ce  82 2a d6 3c
|   5e 73 62 3f  f7 0e 3e f6  90 67 13 19  70 22 b3 e5
|   da 1b d8 43  aa c4 78 d1  52 37 87 29  cc 15 58 bd
|   83 57 0c 0c  95 9f a0 ba  f2 81 6b 11  f9 4d 29 4f
|   76 df 64 86  21 6a ae 93  ff 31 af 1d  6a 4b b1 2e
|   41 b1 46 99  59 f4 1b ed  e7 65 2f 0d  2b 35 84 62
|   83 be 60 80  94 78 b1 77  6d dc fb 94  27 75 59 5a
|   e6 f1 e8 b0  9a 89 f4 b7  0a 23 17 1c  43 91 f0 6c
|   d7 5e 40 b8  2a 3c 54 57  c3 84 b3 25  28 12 d4 5c
|   53 c3 18 44  21 6b de 28  1d bb b7 23  af 5b 51 05
|   e0 7c 61 26  3a 4a 03 d4  33 57 d8 be  04 05 89 7f
|   09 55 3d 38  5b fb bd 22  b8 40 86 73  97 0b f8 98
|   85 6f 8a c2  fa fc 31 50  00 0d 13 88  66 c9 47 23
|   11 68 7e b2  76 53 5f 4d  47 e0 a0 a4  98 21 b9 88
|   07 f2 dc 02  81 ac 93 92  3a 5c 53 91  03 ac a5 9b
|   e1 5c d6 aa  a3 92 3f 0e  33 21 08 d8  c0 d8 ca d4
|   c8 28 80 99  e5 1a 56 31  3c f8 60 66  9f 8a 8a 19
|   d6 2f 9e 6e  3f f9 4f 01  71 3f de b8  ae 3c 0f 62
|   29 bd c1 84  66 03 43 be  cf 73 6b 70  14 05 ae c7
|   0f a1 d7 f2  f2 98 06 18  e3 38 62 f4  a7 a1 51 d0
|   df 8f f9 b0  24 31 3c fb  50 7c 72 fb  9e e0 c8 8d
|   1b 42 a2 ff  91 71 5c f8  09 59 05 ff  c9 9e 05 56
|   33 29 92 ac  a3 5f ae 07  4b a3 1b 88  47 0e 83 67
|   1d 74 be 28  fb 01 b9 cb  8d ab 8e 56  eb 1d 02 0a
|   09 90 09 09  f5 b5 05 c0  46 e0 9b bf  cb 04 8b e1
|   54 98 74 7d  35 12 fd ce  6a 05 75 97  ad 60 e4 a7
|   6f 97 03 a1  3f 3e 62 72  54 b6 7a 78  85 a7 3d 47
|   36 bf 90 fe  39 a7 8b 65  a5 fe 53 5e  ad 4a a3 99
|   6c 5f f9 e1  f2 06 d9 bc  65 33 0c 10  94 3d b2 50
| R2 calculated auth:  46 a9 39 bb  76 03 01 5b  69 c4 7f 6e
| R2  provided  auth:  46 a9 39 bb  76 03 01 5b  69 c4 7f 6e
| authenticator matched, np=34
| data before decryption:
|   73 8a 8f 42  ea 98 37 99  13 4b bb 29  ba 1d e2 de
|   2b 85 7a cc  55 e8 fc 4a  3f b2 be 15  1b fc a1 28
|   59 c7 83 3d  1d 3e 87 02  ce d7 61 79  4b 8d 4b c4
|   ff 36 93 7c  92 37 83 fc  5f 16 c2 35  0f 66 12 e2
|   ea 2b 36 dd  d4 8b 0c 3f  c6 f0 0d ac  ba 49 32 cb
|   e0 62 70 92  3b 70 79 bd  44 e6 29 ce  82 2a d6 3c
|   5e 73 62 3f  f7 0e 3e f6  90 67 13 19  70 22 b3 e5
|   da 1b d8 43  aa c4 78 d1  52 37 87 29  cc 15 58 bd
|   83 57 0c 0c  95 9f a0 ba  f2 81 6b 11  f9 4d 29 4f
|   76 df 64 86  21 6a ae 93  ff 31 af 1d  6a 4b b1 2e
|   41 b1 46 99  59 f4 1b ed  e7 65 2f 0d  2b 35 84 62
|   83 be 60 80  94 78 b1 77  6d dc fb 94  27 75 59 5a
|   e6 f1 e8 b0  9a 89 f4 b7  0a 23 17 1c  43 91 f0 6c
|   d7 5e 40 b8  2a 3c 54 57  c3 84 b3 25  28 12 d4 5c
|   53 c3 18 44  21 6b de 28  1d bb b7 23  af 5b 51 05
|   e0 7c 61 26  3a 4a 03 d4  33 57 d8 be  04 05 89 7f
|   09 55 3d 38  5b fb bd 22  b8 40 86 73  97 0b f8 98
|   85 6f 8a c2  fa fc 31 50  00 0d 13 88  66 c9 47 23
|   11 68 7e b2  76 53 5f 4d  47 e0 a0 a4  98 21 b9 88
|   07 f2 dc 02  81 ac 93 92  3a 5c 53 91  03 ac a5 9b
|   e1 5c d6 aa  a3 92 3f 0e  33 21 08 d8  c0 d8 ca d4
|   c8 28 80 99  e5 1a 56 31  3c f8 60 66  9f 8a 8a 19
|   d6 2f 9e 6e  3f f9 4f 01  71 3f de b8  ae 3c 0f 62
|   29 bd c1 84  66 03 43 be  cf 73 6b 70  14 05 ae c7
|   0f a1 d7 f2  f2 98 06 18  e3 38 62 f4  a7 a1 51 d0
|   df 8f f9 b0  24 31 3c fb  50 7c 72 fb  9e e0 c8 8d
|   1b 42 a2 ff  91 71 5c f8  09 59 05 ff  c9 9e 05 56
|   33 29 92 ac  a3 5f ae 07  4b a3 1b 88  47 0e 83 67
|   1d 74 be 28  fb 01 b9 cb  8d ab 8e 56  eb 1d 02 0a
|   09 90 09 09  f5 b5 05 c0  46 e0 9b bf  cb 04 8b e1
|   54 98 74 7d  35 12 fd ce  6a 05 75 97  ad 60 e4 a7
|   6f 97 03 a1  3f 3e 62 72  54 b6 7a 78  85 a7 3d 47
|   36 bf 90 fe  39 a7 8b 65  a5 fe 53 5e  ad 4a a3 99
|   6c 5f f9 e1  f2 06 d9 bc  65 33 0c 10  94 3d b2 50
| decrypted payload:  28 00 01 08  00 0e 00 00  3d a6 6a 81  e2 92 09 be
|   18 4f a0 1e  5c ed ea 7c  7d 7b 3a 21  3e 15 0d 53
|   5d 17 6a be  1b c5 70 ab  34 47 bc 09  14 7c aa 91
|   9c 8f 81 dc  1e f9 87 cd  6a ec fa f3  a5 9e 37 bc
|   ac 3d fd e1  32 8e e8 b3  fe d3 8b f4  7b 50 34 13
|   33 7a 93 ea  e9 3c 0e 8b  bd 48 18 9c  9e 03 70 f2
|   55 ce 45 22  9f c7 c9 48  43 a3 e2 64  b5 5d 43 38
|   c8 fe f1 d3  06 43 f0 0a  e8 6d 61 8c  60 78 d9 98
|   d3 1b 3b 5e  f5 a6 e8 2f  ef 56 ac b4  33 bd 1e 62
|   b2 3e 0b 17  af 6c b8 31  08 d7 19 5a  7b c4 54 c2
|   13 47 98 c2  cc d2 16 29  75 6c 03 fb  1e 9c 9d 21
|   0c a1 e6 c2  f3 f2 49 2c  f6 06 73 c1  96 1e ce 58
|   81 01 1c cb  16 dc f9 fc  c7 93 08 75  58 16 57 71
|   69 96 66 b7  a9 81 7f f7  37 4d 7c 41  38 62 a6 39
|   00 81 ca 3d  1d fc f7 b5  08 38 d4 34  70 22 6c 21
|   d2 5b 20 a1  d2 ba 2a d1  89 f3 20 79  ce ac 1e c2
|   ec 7d ae 76  94 40 39 a0  21 00 00 14  20 98 9d 37
|   a8 14 a6 4d  8f f0 7c 08  d3 20 e9 e3  2c 00 00 9c
|   02 00 00 28  01 03 04 03  34 56 78 12  03 00 00 0c
|   01 00 00 0c  80 0e 00 80  03 00 00 08  03 00 00 02
|   00 00 00 08  05 00 00 00  02 00 00 28  02 03 04 03
|   34 56 78 12  03 00 00 0c  01 00 00 0c  80 0e 00 80
|   03 00 00 08  03 00 00 01  00 00 00 08  05 00 00 00
|   02 00 00 24  03 03 04 03  34 56 78 12  03 00 00 08
|   01 00 00 03  03 00 00 08  03 00 00 02  00 00 00 08
|   05 00 00 00  00 00 00 24  04 03 04 03  34 56 78 12
|   03 00 00 08  01 00 00 03  03 00 00 08  03 00 00 01
|   00 00 00 08  05 00 00 00  2d 00 00 30  01 00 00 00
|   08 00 00 28  00 00 ff ff  fd 68 c9 f9  41 57 00 02
|   00 00 00 01  00 00 00 00  fd 68 c9 f9  41 57 00 02
|   00 00 00 01  ff ff ff ff  00 00 00 30  01 00 00 00
|   08 00 00 28  00 00 ff ff  fd 68 c9 f9  41 57 00 00
|   00 00 00 00  00 00 00 00  fd 68 c9 f9  41 57 00 00
|   ff ff ff ff  ff ff ff ff  00 01 02 03  04 05 06 07
| striping 8 bytes as pad
| **parse IKEv2 Key Exchange Payload:
|    next payload type: ISAKMP_NEXT_v2Ni
|    critical bit: none
|    length: 264
|    transform type: 14
| processing payload: ISAKMP_NEXT_v2KE (len=264)
| **parse IKEv2 Nonce Payload:
|    next payload type: ISAKMP_NEXT_v2SA
|    critical bit: none
|    length: 20
| processing payload: ISAKMP_NEXT_v2Ni (len=20)
| **parse IKEv2 Security Association Payload:
|    next payload type: ISAKMP_NEXT_v2TSi
|    critical bit: none
|    length: 156
| processing payload: ISAKMP_NEXT_v2SA (len=156)
| **parse IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_v2TSr
|    critical bit: none
|    length: 48
|    number of TS: 1
| processing payload: ISAKMP_NEXT_v2TSi (len=48)
| **parse IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    critical bit: none
|    length: 48
|    number of TS: 1
| processing payload: ISAKMP_NEXT_v2TSr (len=48)
| DH public value received:
|   3d a6 6a 81  e2 92 09 be  18 4f a0 1e  5c ed ea 7c
|   7d 7b 3a 21  3e 15 0d 53  5d 17 6a be  1b c5 70 ab
|   34 47 bc 09  14 7c aa 91  9c 8f 81 dc  1e f9 87 cd
|   6a ec fa f3  a5 9e 37 bc  ac 3d fd e1  32 8e e8 b3
|   fe d3 8b f4  7b 50 34 13  33 7a 93 ea  e9 3c 0e 8b
|   bd 48 18 9c  9e 03 70 f2  55 ce 45 22  9f c7 c9 48
|   43 a3 e2 64  b5 5d 43 38  c8 fe f1 d3  06 43 f0 0a
|   e8 6d 61 8c  60 78 d9 98  d3 1b 3b 5e  f5 a6 e8 2f
|   ef 56 ac b4  33 bd 1e 62  b2 3e 0b 17  af 6c b8 31
|   08 d7 19 5a  7b c4 54 c2  13 47 98 c2  cc d2 16 29
|   75 6c 03 fb  1e 9c 9d 21  0c a1 e6 c2  f3 f2 49 2c
|   f6 06 73 c1  96 1e ce 58  81 01 1c cb  16 dc f9 fc
|   c7 93 08 75  58 16 57 71  69 96 66 b7  a9 81 7f f7
|   37 4d 7c 41  38 62 a6 39  00 81 ca 3d  1d fc f7 b5
|   08 38 d4 34  70 22 6c 21  d2 5b 20 a1  d2 ba 2a d1
|   89 f3 20 79  ce ac 1e c2  ec 7d ae 76  94 40 39 a0
| CHILD SA proposals received
| **emit ISAKMP Message:
|    initiator cookie:
|   80 01 02 03  04 05 06 07
|    responder cookie:
|   de bc 58 3a  8f 40 d0 cf
|    next payload type: ISAKMP_NEXT_v2E
|    ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996)
|    exchange type: ISAKMP_v2_CHILD_SA
|    flags: ISAKMP_FLAG_RESPONSE
|    message ID:  00 00 00 02
| ***emit IKEv2 Encryption Payload:
|    next payload type: ISAKMP_NEXT_v2Ni
|    critical bit: none
| emitting 16 zero bytes of iv into IKEv2 Encryption Payload
| *****emit IKEv2 Nonce Payload:
|    next payload type: ISAKMP_NEXT_v2KE
|    critical bit: none
| emitting 16 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload
| IKEv2 nonce  c6 ba 31 9f  88 5b e7 b7  a2 93 85 dc  bb c6 15 84
| emitting length of IKEv2 Nonce Payload: 20
| *****emit IKEv2 Key Exchange Payload:
|    next payload type: ISAKMP_NEXT_v2SA
|    critical bit: none
|    transform type: 14
| emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload
| ikev2 g^x  a5 9a 13 6c  b8 87 48 57  e1 22 6e a0  b8 55 c2 00
|   31 15 65 84  8b f9 dc a4  5f 49 d4 c5  f0 98 8e 9b
|   31 85 6e 27  5a c2 75 09  07 37 05 b5  b1 53 18 07
|   81 e8 1d 07  c6 19 1c de  dc 1f 2c 26  d2 0b 59 f9
|   67 6a ee 3c  e5 fa 72 3f  54 96 1e 7d  8e d0 30 08
|   0b ed 95 b0  65 2f 5c a6  36 7e 92 2d  da cb 88 54
|   e3 97 fa 16  6f 9e 7c a6  0c 43 2f 29  be 2c a4 55
|   68 01 45 bc  56 a9 84 b9  2b 1b bf 9a  fc 84 67 5f
|   d3 04 79 90  b7 fa 89 5b  04 06 d5 9a  50 92 16 4b
|   d6 33 40 be  2a 44 94 74  33 a7 a5 c1  1f 88 5b eb
|   4e d2 bb 94  b9 22 db e3  b6 5a 8c f9  d6 43 5d 5e
|   5d c9 19 b8  c8 81 53 01  95 09 02 7b  c0 2a b0 c8
|   5d 2c 69 78  6c e8 f6 5d  e4 90 43 83  fd f7 98 5e
|   cc 92 5c 79  7b 62 ae 98  db 4f 7f e0  68 7c cd 29
|   69 0a ad a3  e8 37 d7 41  b4 79 b3 a5  38 a2 8d a0
|   69 ff bd aa  ba d5 54 70  40 ab b5 fc  26 6d ae ce
| emitting length of IKEv2 Key Exchange Payload: 264
| ***parse IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    length: 40
|    start port: 0
|    end port: 65535
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 02  00 00 00 01  00 00 00 00
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 02  00 00 00 01  ff ff ff ff
| ***parse IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    length: 40
|    start port: 0
|    end port: 65535
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 00  00 00 00 00  00 00 00 00
| parsing 16 raw bytes of IKEv2 Traffic Selector into ipv6 ts
| ipv6 ts  fd 68 c9 f9  41 57 00 00  ff ff ff ff  ff ff ff ff
| ikev2_evaluate_connection_fit, evaluating base fit for parker1--jj2
|   ikev2_evaluate_connection_fit evaluating our I=parker1--jj2:fd68:c9f9:4157:2:0:1::/96:0/0 R=fd68:c9f9:4157::/64:0/0  to their:
|     tsi[0]=fd68:c9f9:4157:2:0:1::/fd68:c9f9:4157:2:0:1:ffff:ffff proto=0 portrange 0-65535, tsr[0]=fd68:c9f9:4157::/fd68:c9f9:4157:0:ffff:ffff:ffff:ffff proto=0 portrange 0-65535
| ei->port 0  tsi[tsi_ni].startport 0  tsi[tsi_ni].endport 65535
|       has ts_range1=32 maskbits1=96 ts_range2=64 maskbits2=64 fitbits=32896 <> -1
| bfit_n=ikev2_evaluate_connection_fit found better fit c parker1--jj2
|     evaluate_connection_port_fit tsi_n[1], best=-1
|    tsi[0] 0-65535: exact port match with 0.  fitness 65536
|       evaluating_connection_port_fit tsi_n[0], range_i=65536 best=-1
|    tsr[0] 0-65535: exact port match with 0.  fitness 65536
|       evaluating_connection_port_fit tsi_n[0] tsr_n[0], range=65536/65536 best=-1
|     best ports fit so far: tsi[0] fitrange_i 65536, tsr[0] fitrange_r 65536, matchiness 131072
|     port_fitness 131072
| ikev2_evaluate_connection_port_fit found better fit c parker1--jj2, tsi[0],tsr[0]
| find_ID_host_pair: looking for me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (wildcard)
|                   comparing to me=@jamesjohnson.emmjay.credil.org him=@parker01.emmjay.credil.org (parker1--jj2)
|   concluded with parker1--jj2
|   checking hostpair fd68:c9f9:4157::/64 -> fd68:c9f9:4157:2:0:1::/96 is found
| ikev2_evaluate_connection_fit, concluded with parker1--jj2
| printing contents struct traffic_selector
|   ts_type: IKEv2_TS_IPV6_ADDR_RANGE
|   ipprotoid: 0
|   startport: 0
|   endport: 65535
|   ip low: fd68:c9f9:4157::
|   ip high: fd68:c9f9:4157:0:ffff:ffff:ffff:ffff
| printing contents struct traffic_selector
|   ts_type: IKEv2_TS_IPV6_ADDR_RANGE
|   ipprotoid: 0
|   startport: 0
|   endport: 65535
|   ip low: fd68:c9f9:4157:2:0:1::
|   ip high: fd68:c9f9:4157:2:0:1:ffff:ffff
| *****emit IKEv2 Security Association Payload:
|    next payload type: ISAKMP_NEXT_v2TSi
|    critical bit: none
| empty esp_info, returning defaults
| ***parse IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_P
|    length: 40
|    prop #: 1
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| parsing 4 raw bytes of IKEv2 Proposal Substructure Payload into CHILD SA SPI
| CHILD SA SPI  34 56 78 12
| SPI received: 34567812
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    length: 12
|    transform type: 1
|    transform ID: 12
| *****parse IKEv2 Attribute Substructure Payload:
|    af+type: KEY_LENGTH
|    length/value: 128
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    length: 8
|    transform type: 3
|    transform ID: 2
| ****parse IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    length: 8
|    transform type: 5
|    transform ID: 0
| ***parse IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_P
|    length: 40
|    prop #: 2
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| parsing 4 raw bytes of IKEv2 Proposal Substructure Payload into CHILD SA SPI
| CHILD SA SPI  34 56 78 12
| SPI received: 34567812
| ******emit IKEv2 Proposal Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    prop #: 1
|    proto ID: 3
|    spi size: 4
|    # transforms: 3
| emitting 4 raw bytes of our spi into IKEv2 Proposal Substructure Payload
| our spi  34 56 78 12
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 1
|    transform ID: 12
| ********emit IKEv2 Attribute Substructure Payload:
|    af+type: KEY_LENGTH
|    length/value: 128
|     [128 is 128??]
| emitting length of IKEv2 Transform Substructure Payload: 12
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_T
|    transform type: 3
|    transform ID: 2
| emitting length of IKEv2 Transform Substructure Payload: 8
| *******emit IKEv2 Transform Substructure Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    transform type: 5
|    transform ID: 0
| emitting length of IKEv2 Transform Substructure Payload: 8
| emitting length of IKEv2 Proposal Substructure Payload: 40
| emitting length of IKEv2 Security Association Payload: 44
| *****emit IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_v2TSr
|    critical bit: none
|    number of TS: 1
| ******emit IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    start port: 0
|    end port: 65535
| emitting 16 raw bytes of ipv6 low into IKEv2 Traffic Selector
| ipv6 low  fd 68 c9 f9  41 57 00 02  00 00 00 01  00 00 00 00
| emitting 16 raw bytes of ipv6 high into IKEv2 Traffic Selector
| ipv6 high  fd 68 c9 f9  41 57 00 02  00 00 00 01  ff ff ff ff
| emitting length of IKEv2 Traffic Selector: 40
| emitting length of IKEv2 Traffic Selector Payload: 48
| *****emit IKEv2 Traffic Selector Payload:
|    next payload type: ISAKMP_NEXT_NONE
|    critical bit: none
|    number of TS: 1
| ******emit IKEv2 Traffic Selector:
|    TS type: IKEv2_TS_IPV6_ADDR_RANGE
|    IP Protocol ID: 0
|    start port: 0
|    end port: 65535
| emitting 16 raw bytes of ipv6 low into IKEv2 Traffic Selector
| ipv6 low  fd 68 c9 f9  41 57 00 00  00 00 00 00  00 00 00 00
| emitting 16 raw bytes of ipv6 high into IKEv2 Traffic Selector
| ipv6 high  fd 68 c9 f9  41 57 00 00  ff ff ff ff  ff ff ff ff
| emitting length of IKEv2 Traffic Selector: 40
| emitting length of IKEv2 Traffic Selector Payload: 48
| prf+[1]:  f1 a3 5e 87  c7 70 88 01  b6 81 3d 59  56 99 8e be
|   1a 76 a5 e4
| prf+[2]:  c3 2c d0 f3  83 3d 8f 24  1e 8f 86 2a  2a 58 ce d8
|   0f 77 b6 4a
| prf+[3]:  6f 3d 81 fb  39 51 57 a1  df 92 21 c8  77 8f 8f 07
|   5c ee d5 26
| prf+[4]:  1e 9f 3d b0  17 f3 f7 fc  e8 5e 55 44  63 f0 30 94
|   2f 4e 11 2a
| our  keymat  f1 a3 5e 87  c7 70 88 01  b6 81 3d 59  56 99 8e be
|   1a 76 a5 e4  c3 2c d0 f3  83 3d 8f 24  1e 8f 86 2a
|   2a 58 ce d8
| peer keymat  0f 77 b6 4a  6f 3d 81 fb  39 51 57 a1  df 92 21 c8
|   77 8f 8f 07  5c ee d5 26  1e 9f 3d b0  17 f3 f7 fc
|   e8 5e 55 44
| emitting 8 raw bytes of padding and length into cleartext
| padding and length  00 01 02 03  04 05 06 07
| emitting 12 zero bytes of length of truncated HMAC into IKEv2 Encryption Payload
| emitting length of IKEv2 Encryption Payload: 464
| emitting length of ISAKMP Message: 492
| data before encryption:
|   22 00 00 14  c6 ba 31 9f  88 5b e7 b7  a2 93 85 dc
|   bb c6 15 84  21 00 01 08  00 0e 00 00  a5 9a 13 6c
|   b8 87 48 57  e1 22 6e a0  b8 55 c2 00  31 15 65 84
|   8b f9 dc a4  5f 49 d4 c5  f0 98 8e 9b  31 85 6e 27
|   5a c2 75 09  07 37 05 b5  b1 53 18 07  81 e8 1d 07
|   c6 19 1c de  dc 1f 2c 26  d2 0b 59 f9  67 6a ee 3c
|   e5 fa 72 3f  54 96 1e 7d  8e d0 30 08  0b ed 95 b0
|   65 2f 5c a6  36 7e 92 2d  da cb 88 54  e3 97 fa 16
|   6f 9e 7c a6  0c 43 2f 29  be 2c a4 55  68 01 45 bc
|   56 a9 84 b9  2b 1b bf 9a  fc 84 67 5f  d3 04 79 90
|   b7 fa 89 5b  04 06 d5 9a  50 92 16 4b  d6 33 40 be
|   2a 44 94 74  33 a7 a5 c1  1f 88 5b eb  4e d2 bb 94
|   b9 22 db e3  b6 5a 8c f9  d6 43 5d 5e  5d c9 19 b8
|   c8 81 53 01  95 09 02 7b  c0 2a b0 c8  5d 2c 69 78
|   6c e8 f6 5d  e4 90 43 83  fd f7 98 5e  cc 92 5c 79
|   7b 62 ae 98  db 4f 7f e0  68 7c cd 29  69 0a ad a3
|   e8 37 d7 41  b4 79 b3 a5  38 a2 8d a0  69 ff bd aa
|   ba d5 54 70  40 ab b5 fc  26 6d ae ce  2c 00 00 2c
|   00 00 00 28  01 03 04 03  34 56 78 12  03 00 00 0c
|   01 00 00 0c  80 0e 00 80  03 00 00 08  03 00 00 02
|   00 00 00 08  05 00 00 00  2d 00 00 30  01 00 00 00
|   08 00 00 28  00 00 ff ff  fd 68 c9 f9  41 57 00 02
|   00 00 00 01  00 00 00 00  fd 68 c9 f9  41 57 00 02
|   00 00 00 01  ff ff ff ff  00 00 00 30  01 00 00 00
|   08 00 00 28  00 00 ff ff  fd 68 c9 f9  41 57 00 00
|   00 00 00 00  00 00 00 00  fd 68 c9 f9  41 57 00 00
|   ff ff ff ff  ff ff ff ff  00 01 02 03  04 05 06 07
| data after encryption:
|   02 a4 9e 95  f1 bd 5d d3  c4 53 bc 3a  42 ab f9 dd
|   eb a9 63 d7  8e 05 4f b1  5e d9 c0 65  91 bf 68 e9
|   20 45 79 74  e7 b8 4c 5f  e0 43 6f 2f  4d 53 90 a7
|   40 95 bf d3  b1 1b 8b 6e  65 75 ff 3c  16 17 32 13
|   b2 cf 55 50  4e ee b5 b3  ce 95 89 91  5a 1b 7f cc
|   39 48 0e 3a  ca a9 73 5e  c7 93 2d 2e  a0 3c ca 00
|   f8 64 f5 6e  03 17 87 54  ed 0a fe 14  2a 12 a4 75
|   60 8f fd 67  eb 31 1d bc  a0 d7 ca a6  e8 c1 e0 16
|   41 3d 82 46  bb ef 6e c0  11 29 48 c6  7c 6e e2 50
|   39 33 e5 e1  01 cd f8 bb  b4 7b 04 a2  33 0b e9 51
|   8a 52 d2 78  e3 86 ed ea  b4 cc b3 42  9b 4e bc d4
|   3f 47 77 bd  cf d8 5e 8a  5b 9e 89 a7  ec c9 a7 61
|   e2 03 11 41  e2 22 76 ed  6b 7a cf ff  27 97 4f 06
|   a4 5b 67 5b  00 1e 97 a7  41 b8 fb 85  0f 46 b4 fb
|   6f 1c f1 bd  74 86 6d f8  63 85 56 3b  57 17 54 11
|   b5 91 ae 5c  85 23 a6 87  f4 11 8f 74  62 1f 31 85
|   ab 2b 98 b1  61 2e 0b e5  a2 66 99 d6  5f b1 81 3a
|   5b 06 08 13  93 da c6 19  2d ad 1b 61  38 85 d5 f6
|   fe 1d 14 a0  60 4b 3e 67  9e b9 91 22  83 38 6a 08
|   f8 73 f7 45  c8 56 f9 d2  43 65 2b c1  df 99 9a 1d
|   75 73 b7 79  a2 b9 6a f0  e2 48 f8 32  8d 6e d3 10
|   19 9b f4 e5  32 0f f1 c2  30 14 70 b3  b3 90 90 ae
|   a0 9c 1d 94  6f cd 29 cf  69 bc ce 90  b4 41 d5 13
|   de bf 32 54  6e cf 1b 5b  01 f5 d8 4a  8d 59 a5 dd
|   aa 38 22 de  9f 0b 0b 22  33 9f c6 68  86 e3 5f b1
|   a9 9d 41 6c  e2 33 93 c7  05 24 bc 57  ff 7f c3 5d
|   ff 42 00 3b  4b 58 2d c6  99 88 af 98  58 73 b0 8d
| data being hmac:  80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 24 20  00 00 00 02  00 00 01 ec  28 00 01 d0
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   02 a4 9e 95  f1 bd 5d d3  c4 53 bc 3a  42 ab f9 dd
|   eb a9 63 d7  8e 05 4f b1  5e d9 c0 65  91 bf 68 e9
|   20 45 79 74  e7 b8 4c 5f  e0 43 6f 2f  4d 53 90 a7
|   40 95 bf d3  b1 1b 8b 6e  65 75 ff 3c  16 17 32 13
|   b2 cf 55 50  4e ee b5 b3  ce 95 89 91  5a 1b 7f cc
|   39 48 0e 3a  ca a9 73 5e  c7 93 2d 2e  a0 3c ca 00
|   f8 64 f5 6e  03 17 87 54  ed 0a fe 14  2a 12 a4 75
|   60 8f fd 67  eb 31 1d bc  a0 d7 ca a6  e8 c1 e0 16
|   41 3d 82 46  bb ef 6e c0  11 29 48 c6  7c 6e e2 50
|   39 33 e5 e1  01 cd f8 bb  b4 7b 04 a2  33 0b e9 51
|   8a 52 d2 78  e3 86 ed ea  b4 cc b3 42  9b 4e bc d4
|   3f 47 77 bd  cf d8 5e 8a  5b 9e 89 a7  ec c9 a7 61
|   e2 03 11 41  e2 22 76 ed  6b 7a cf ff  27 97 4f 06
|   a4 5b 67 5b  00 1e 97 a7  41 b8 fb 85  0f 46 b4 fb
|   6f 1c f1 bd  74 86 6d f8  63 85 56 3b  57 17 54 11
|   b5 91 ae 5c  85 23 a6 87  f4 11 8f 74  62 1f 31 85
|   ab 2b 98 b1  61 2e 0b e5  a2 66 99 d6  5f b1 81 3a
|   5b 06 08 13  93 da c6 19  2d ad 1b 61  38 85 d5 f6
|   fe 1d 14 a0  60 4b 3e 67  9e b9 91 22  83 38 6a 08
|   f8 73 f7 45  c8 56 f9 d2  43 65 2b c1  df 99 9a 1d
|   75 73 b7 79  a2 b9 6a f0  e2 48 f8 32  8d 6e d3 10
|   19 9b f4 e5  32 0f f1 c2  30 14 70 b3  b3 90 90 ae
|   a0 9c 1d 94  6f cd 29 cf  69 bc ce 90  b4 41 d5 13
|   de bf 32 54  6e cf 1b 5b  01 f5 d8 4a  8d 59 a5 dd
|   aa 38 22 de  9f 0b 0b 22  33 9f c6 68  86 e3 5f b1
|   a9 9d 41 6c  e2 33 93 c7  05 24 bc 57  ff 7f c3 5d
|   ff 42 00 3b  4b 58 2d c6  99 88 af 98  58 73 b0 8d
| out calculated auth:
|   fe 0f 04 6f  24 bf 55 d8  56 bf ea 4d
| complete v2 state transition with STF_OK
./rekeyikev2-R1 transition from state STATE_PARENT_R2 to state STATE_CHILD_C1_KEYED
./rekeyikev2-R1 negotiated tunnel [fd68:c9f9:4157::,fd68:c9f9:4157:0:ffff:ffff:ffff:ffff proto:0 port:0-65535] -> [fd68:c9f9:4157:2:0:1::,fd68:c9f9:4157:2:0:1:ffff:ffff proto:0 port:0-65535]
./rekeyikev2-R1 STATE_CHILD_C1_KEYED: CHILD SA established tunnel mode {ESP=>0x34567812 <0x34567812 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=none} (msgid: 00000002)
| sending reply packet to 192.168.1.1:500 (from port 500)
sending 492 bytes for STATE_PARENT_R2 through eth0:500 to 192.168.1.1:500 (using #3)
|   80 01 02 03  04 05 06 07  de bc 58 3a  8f 40 d0 cf
|   2e 20 24 20  00 00 00 02  00 00 01 ec  28 00 01 d0
|   80 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f
|   02 a4 9e 95  f1 bd 5d d3  c4 53 bc 3a  42 ab f9 dd
|   eb a9 63 d7  8e 05 4f b1  5e d9 c0 65  91 bf 68 e9
|   20 45 79 74  e7 b8 4c 5f  e0 43 6f 2f  4d 53 90 a7
|   40 95 bf d3  b1 1b 8b 6e  65 75 ff 3c  16 17 32 13
|   b2 cf 55 50  4e ee b5 b3  ce 95 89 91  5a 1b 7f cc
|   39 48 0e 3a  ca a9 73 5e  c7 93 2d 2e  a0 3c ca 00
|   f8 64 f5 6e  03 17 87 54  ed 0a fe 14  2a 12 a4 75
|   60 8f fd 67  eb 31 1d bc  a0 d7 ca a6  e8 c1 e0 16
|   41 3d 82 46  bb ef 6e c0  11 29 48 c6  7c 6e e2 50
|   39 33 e5 e1  01 cd f8 bb  b4 7b 04 a2  33 0b e9 51
|   8a 52 d2 78  e3 86 ed ea  b4 cc b3 42  9b 4e bc d4
|   3f 47 77 bd  cf d8 5e 8a  5b 9e 89 a7  ec c9 a7 61
|   e2 03 11 41  e2 22 76 ed  6b 7a cf ff  27 97 4f 06
|   a4 5b 67 5b  00 1e 97 a7  41 b8 fb 85  0f 46 b4 fb
|   6f 1c f1 bd  74 86 6d f8  63 85 56 3b  57 17 54 11
|   b5 91 ae 5c  85 23 a6 87  f4 11 8f 74  62 1f 31 85
|   ab 2b 98 b1  61 2e 0b e5  a2 66 99 d6  5f b1 81 3a
|   5b 06 08 13  93 da c6 19  2d ad 1b 61  38 85 d5 f6
|   fe 1d 14 a0  60 4b 3e 67  9e b9 91 22  83 38 6a 08
|   f8 73 f7 45  c8 56 f9 d2  43 65 2b c1  df 99 9a 1d
|   75 73 b7 79  a2 b9 6a f0  e2 48 f8 32  8d 6e d3 10
|   19 9b f4 e5  32 0f f1 c2  30 14 70 b3  b3 90 90 ae
|   a0 9c 1d 94  6f cd 29 cf  69 bc ce 90  b4 41 d5 13
|   de bf 32 54  6e cf 1b 5b  01 f5 d8 4a  8d 59 a5 dd
|   aa 38 22 de  9f 0b 0b 22  33 9f c6 68  86 e3 5f b1
|   a9 9d 41 6c  e2 33 93 c7  05 24 bc 57  ff 7f c3 5d
|   ff 42 00 3b  4b 58 2d c6  99 88 af 98  58 73 b0 8d
|   fe 0f 04 6f  24 bf 55 d8  56 bf ea 4d
| releasing whack for #X (sock=Y)
| releasing whack for #X (sock=Y)
./rekeyikev2-R1 leak: reply packet, item size: X
./rekeyikev2-R1 leak: skeyseed_t1, item size: X
./rekeyikev2-R1 leak: responder keys, item size: X
./rekeyikev2-R1 leak: initiator keys, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_v2_prop, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_attrs, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_attrs, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: 4 * sa copy attrs array, item size: X
./rekeyikev2-R1 leak: sa copy trans array, item size: X
./rekeyikev2-R1 leak: sa copy prop array, item size: X
./rekeyikev2-R1 leak: sa copy prop conj array, item size: X
./rekeyikev2-R1 leak: sa copy prop_conj, item size: X
./rekeyikev2-R1 leak: calculated skey_prshared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_pishared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_ershared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_eishared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_arshared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_aishared secret, item size: X
./rekeyikev2-R1 leak: calculated skey_dshared secret, item size: X
./rekeyikev2-R1 leak: calculated sharedshared secret, item size: X
./rekeyikev2-R1 leak: ikev2_inCI1 KE, item size: X
./rekeyikev2-R1 leak: nonce, item size: X
./rekeyikev2-R1 leak: Gi, item size: X
./rekeyikev2-R1 leak: long term secret, item size: X
./rekeyikev2-R1 leak: saved gi value, item size: X
./rekeyikev2-R1 leak: initiator nonce, item size: X
./rekeyikev2-R1 leak: ikev2child_inCI1 KE, item size: X
./rekeyikev2-R1 leak: st_skey_pr in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_pi in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_er in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ei in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ar in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ai in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_d in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skeyseed in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_enc_key in duplicate_state, item size: X
./rekeyikev2-R1 leak: struct state in new_state(), item size: X
./rekeyikev2-R1 leak: reply packet, item size: X
./rekeyikev2-R1 leak: skeyseed_t1, item size: X
./rekeyikev2-R1 leak: responder keys, item size: X
./rekeyikev2-R1 leak: initiator keys, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_v2_prop, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_attrs, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: db_attrs, item size: X
./rekeyikev2-R1 leak: db_v2_trans, item size: X
./rekeyikev2-R1 leak: db_v2_prop_conj, item size: X
./rekeyikev2-R1 leak: 4 * sa copy attrs array, item size: X
./rekeyikev2-R1 leak: sa copy trans array, item size: X
./rekeyikev2-R1 leak: sa copy prop array, item size: X
./rekeyikev2-R1 leak: sa copy prop conj array, item size: X
./rekeyikev2-R1 leak: sa copy prop_conj, item size: X
./rekeyikev2-R1 leak: st_nr in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_ni in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_pr in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_pi in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_er in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ei in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ar in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_ai in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skey_d in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_skeyseed in duplicate_state, item size: X
./rekeyikev2-R1 leak: st_enc_key in duplicate_state, item size: X
./rekeyikev2-R1 leak: struct state in new_state(), item size: X
./rekeyikev2-R1 leak: ikev2_inI2outR2 KE, item size: X
./rekeyikev2-R1 leak: ikev2_inI1outR1 KE, item size: X
./rekeyikev2-R1 leak: msg_digest, item size: X
./rekeyikev2-R1 leak: 2 * keep id name, item size: X
./rekeyikev2-R1 leak: ID host_pair, item size: X
./rekeyikev2-R1 leak: host_pair, item size: X
./rekeyikev2-R1 leak: host ip, item size: X
./rekeyikev2-R1 leak: keep id name, item size: X
./rekeyikev2-R1 leak: host ip, item size: X
./rekeyikev2-R1 leak: keep id name, item size: X
./rekeyikev2-R1 leak: connection name, item size: X
./rekeyikev2-R1 leak: struct connection, item size: X
./rekeyikev2-R1 leak: keep id name, item size: X
./rekeyikev2-R1 leak: pubkey entry, item size: X
./rekeyikev2-R1 leak: pubkey, item size: X
./rekeyikev2-R1 leak: keep id name, item size: X
./rekeyikev2-R1 leak: pubkey entry, item size: X
./rekeyikev2-R1 leak: pubkey, item size: X
./rekeyikev2-R1 leak: 2 * id list, item size: X
./rekeyikev2-R1 leak: secret, item size: X
./rekeyikev2-R1 leak: 2 * hasher name, item size: X
./rekeyikev2-R1 leak: policies path, item size: X
./rekeyikev2-R1 leak: ocspcerts path, item size: X
./rekeyikev2-R1 leak: aacerts path, item size: X
./rekeyikev2-R1 leak: certs path, item size: X
./rekeyikev2-R1 leak: private path, item size: X
./rekeyikev2-R1 leak: crls path, item size: X
./rekeyikev2-R1 leak: cacert path, item size: X
./rekeyikev2-R1 leak: acert path, item size: X
./rekeyikev2-R1 leak: default conf var_dir, item size: X
./rekeyikev2-R1 leak: default conf conffile, item size: X
./rekeyikev2-R1 leak: default conf ipsecd_dir, item size: X
./rekeyikev2-R1 leak: default conf ipsec_conf_dir, item size: X
./rekeyikev2-R1 leak detective found Z leaks, total size X
Pre-amble (offset: X): #!-pluto-whack-file- recorded on FOO
