Re: [Ipsec-tools-devel] setkey -D (2)

[richard l. <mai...@lu...>]

On Sun, 17 Apr 2005 11:23:02 +0300
Aidas Kasparas <a.k...@gm...> wrote:

> > 'setkey -D' produces a line like this:
> > 
> > diff: 7600(s)   hard: 28800(s)  soft: 23040(s)
> > 
> > What does this diff and soft mean?
> > 
> 
> Diff[erence] is how much seconds have passed since this SA was
> established.

Strange, I didn't see it step in time yesterday. I just had another look
at it and now I see it's stepping in time. I must have overlooked it I
suppose.
 
> Soft is time since SA establishment when negtiation for new SA should
> begin.

I thought this was always 30 seconds before the end of the expiration of
the SA. So I'd expect 27970 instead of 23040.

-- 
___________________________________________________________________
Mac OS X proves that it's easier to make UNIX pretty than it is to
make Windows secure.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+