Re: [Ipsec-tools-devel] Expired SAs creating a whack of logfile traffic

[Aidas K. <a.k...@gm...>]

Krzysztof,

	maybe you know which kernel versions are affected?

Krzysztof Oledzki wrote:
>=20
>=20
> On Mon, 28 Mar 2005, Marcus D. Leech wrote:
>=20
>> I'm running HEAD+hybrid_rsa.patch.
>>
>> I've noticed that when an SA expires (IKE or IPSEC), my logfile fills
>>  up with "Expired SA" notices for SAs that are currently valid
>>  (at least, as shown my setkey -D).  The same message, over and
>>  over again once per second.  I didn't see this behaviour in 0.5.
>=20
>=20
> Please upgrade your kernel to the 2.6.11.6 or 2.6.12-rc1. There was a=20
> bug in the xfrm IPSec implementation, fixed recently.
>=20
> Best regards,
>=20
>             Krzysztof Ol=C4=99dzki

--=20
Aidas Kasparas
IT administrator
GM Consult Group, UAB