Subject: [IPsec] Fragmentation of ESP Packets on 2.6 linux kernel

From: "Sujithra P" <[email-masked]>
Date: Tue, 21 Oct 2008 16:18:52 +0530

Hi all,

I am using ESP in transport mode between IMS SIP Client and PCSCF ( 3GPP
33.203).
I am running the SIP client on linux kernel using setkey to manage SAs.
When the ESP packets from the PCSCF are fragmented, the linux kernel is not
processing it.
I am not able to receive the packet at the application.

Linux Version: Linux ubuntu 2.6.24

The following ESP packet is fragmented, but the kernel is not processing it.
I am not receiving the packet at application. If the ESP packet is not
fragmented, it works fine.

14:18:23.995392 IP 192.168.10.10 > 10.6.2.49: ESP(spi=0x00acf799,seq=0x6),
length 1436
        0x0000:  4500 05b0 8d1f 2000 fb32 3613 c0a8 0a0a  E........26.....
        0x0010:  0a06 0231 00ac f799 0000 0006 0000 0000  ...1............
        0x0020:  0000 0000 32b8 7c8c 4db9 872d 0fb8 85a6  ....2.|.M..-....
        0x0030:  9078 4040 596c 0d34 f3f2 dca3 0536 5083  .x@@Yl.4.....6P.
        0x0040:  112c ed0f 8311 ba30 b95c c16a a940 753c  .,.....0.\.j.@u<
        0x0050:  16eb cf57 f02c 9306 0343 adae 6c12 4dea  ...W.,...C..l.M.
        0x0060:  4917 fcc5 ef4d eddd 5f2c 9df4 8092 bebe  I....M.._,......
        0x0070:  72d8 a704 4415 6cc0 3fe5 3295 22ab c014  r...D.l.?.2."...
        0x0080:  cbeb 9e93 1000 65ca 2655 be46 d4b1 43cf  ......e.&U.F..C.
        0x0090:  b5f4 a4cf c139 e453 9eb3 9a3b f901 ee1d  .....9.S...;....
        0x00a0:  7fa2 2bfd 04a2 1be2 b850 824d 8e32 b14f  ..+......P.M.2.O
        0x00b0:  a817 2a20 c554 0e79 8ffa 4a0d 4dff ec98  ..*..T.y..J.M...
        0x00c0:  f61b a163 0fe8 0326 4a72 5fb6 d0e9 de26  ...c...&Jr_....&
        0x00d0:  09cb 9a8f 4ce5 101a 2841 b4fb 8178 ad59  ....L...(A...x.Y
        0x00e0:  0774 6459 7c1d 72bb 61b2 ee61 132e 810b  .tdY|.r.a..a....
        0x00f0:  105c a328 d742 dd7b 8ffc 1da5 a703 290d  .\.(.B.{......).
        0x0100:  3301 ffcb 9267 dcd2 cfff de8a 5de6 018e  3....g......]...
        0x0110:  dd3b ef17 db86 52ce 8f70 53c9 5e5f 6482  .;....R..pS.^_d.
        0x0120:  9340 8d87 af62 e90a 7bdb 5c10 eb71 2ab7  .@...b..{.\..q*.
        0x0130:  e7e0 a212 4a7f f014 6469 7887 942a 99a8  ....J...dix..*..
        0x0140:  051e 5c3c c98e 11d3 a1d8 1254 44a8 20bf  ..\<.......TD...
        0x0150:  16f4 ff9b f0dc f71d a641 3bea e6d8 82b6  .........A;.....
        0x0160:  1547 6b40 24c3 3418 8471 0240 2f7f ddd7  .Gk@$.4..q.@/...
        0x0170:  fd90 ea94 51d5 64d1 bd61 ea50 542f 7b91  ....Q.d..a.PT/{.
        0x0180:  1c8b 7a64 bf90 bcac 56f6 1cde 7b54 645c  ..zd....V...{Td\
        0x0190:  440d a9a3 fd24 f3d3 76ac 3ab1 76f2 21a3  D....$..v.:.v.!.
        0x01a0:  d9b1 c622 4205 bbc0 92e9 a30d 900f 8cac  ..."B...........
        0x01b0:  fb14 05e8 0a46 9b90 8183 335e b5d8 7472  .....F....3^..tr
        0x01c0:  79cc 2492 03ff d9fb 3b9a 4345 ba0b 4936  y.$.....;.CE..I6
        0x01d0:  1b7a bf01 83c6 e18f 71fa 00f9 45f2 e671  .z......q...E..q
        0x01e0:  ed36 c437 d4a8 c2ee aa44 9d22 869c a937  .6.7.....D."...7
        0x01f0:  9cf3 4d42 c97f d707 60d2 b597 f943 cd53  ..MB....`....C.S
        0x0200:  8895 a7a0 aefd 4e55 510d 1659 a06f 9695  ......NUQ..Y.o..
        0x0210:  1824 75bf fb2e 018a c8b0 9681 f1a7 3db4  .$u...........=.
        0x0220:  fa98 d833 0e2e 23cf 9e8f bb25 caa6 93d9  ...3..#....%....
        0x0230:  a546 ecb8 bdc5 8f7d 6056 6e86 2d6b 9b1d  .F.....}`Vn.-k..
        0x0240:  d5a3 28b7 b1d6 628f d817 b5b9 2bdc 70a6  ..(...b.....+.p.
        0x0250:  2b08 350a d1fe 8b4f e536 f0e7 5bb6 0007  +.5....O.6..[...
        0x0260:  bd49 3ada 864a 59b6 d449 ec81 dafc 908b  .I:..JY..I......
        0x0270:  99a4 88ed 1e65 1a1f d598 db65 2656 f28a  .....e.....e&V..
        0x0280:  0182 8762 4679 fd82 dec6 4a52 0a98 c16b  ...bFy....JR...k
        0x0290:  5c0d b194 e592 6180 5225 4367 f3e3 af65  \.....a.R%Cg...e
        0x02a0:  4d99 a596 1059 4d5a 8a9c 0ca8 df5f 0131  M....YMZ....._.1
        0x02b0:  73ca 8d6c 305a 7391 db45 6a16 79a4 443d  s..l0Zs..Ej.y.D=
        0x02c0:  438b eecb d13d 6a55 2887 7f3d d3fd 95db  C....=jU(..=....
        0x02d0:  d401 4146 e970 3947 57ef ac10 4ea0 aa34  ..AF.p9GW...N..4
        0x02e0:  8c1c b0b3 3df8 d432 2e03 1e8a cb93 f116  ....=..2........
        0x02f0:  acc3 01f4 05db 5869 e037 1f3f 49bf 13bf  ......Xi.7.?I...
        0x0300:  4c73 6d2d a886 b351 a719 39ca 4da5 9499  Lsm-...Q..9.M...
        0x0310:  38f3 6581 1089 be1a fbf6 b8bd 4ba9 04a7  8.e.........K...
        0x0320:  f7ce aa8c 2bf4 5e8f 5025 b6fd c0fe 8c8a  ....+.^.P%......
        0x0330:  aa93 2b49 9fc6 29be cf9b 0cce 18f0 f901  ..+I..).........
        0x0340:  6dbf 8274 22e2 b2e8 2d63 3b1e 0e2f 8718  m..t"...-c;../..
        0x0350:  69e3 5cee edf7 8611 326d b081 8f2c 44b7  i.\.....2m...,D.
        0x0360:  4d63 6acf 2f3b 47ce dc68 c695 dd80 e0dd  Mcj./;G..h......
        0x0370:  919e 7d0c 9212 7597 3afd a95c af4a 6883  ..}...u.:..\.Jh.
        0x0380:  e90d 0702 9dac 4b01 0dc8 cf23 f02d aa93  ......K....#.-..
        0x0390:  6615 eae9 bce0 567d db37 c0ef 748a 1825  f.....V}.7..t..%
        0x03a0:  762b 4b24 4af1 72bb e286 c44a cf49 b818  v+K$J.r....J.I..
        0x03b0:  22b6 fae6 9295 aa81 202a 407c 0228 df98  "........*@|.(..
        0x03c0:  7609 bac9 ba5b 1a35 e30a bedf 33ed c78b  v....[.5....3...
        0x03d0:  f8c8 92db 9d7a 1a45 818f 3542 3134 fdbc  .....z.E..5B14..
        0x03e0:  1ffe 21c8 dcd8 14a4 0dab bc4e b82d e416  ..!........N.-..
        0x03f0:  90f0 3e9f 59bc 43b7 a6d1 1835 5896 90b6  ..>.Y.C....5X...
        0x0400:  6586 efdc 9efe 04ae 125b 1afb f425 1e94  e........[...%..
        0x0410:  c704 3d30 d71f 344c 3643 5658 e723 ac9b  ..=0..4L6CVX.#..
        0x0420:  ed07 7835 3447 a22f 9cf2 06e6 f0f4 6e53  ..x54G./......nS
        0x0430:  24cc b0e7 0cfb efdd 29a4 c3f2 a122 55a2  $.......)...."U.
        0x0440:  ca63 df2f c1b6 aa0c a90a 9f7c 70ab 4486  .c./.......|p.D.
        0x0450:  5b18 74e4 8fb7 fa9c 8c48 942e fe0a 2ee5  [.t......H......
        0x0460:  d550 cae3 fe4e b1c8 5a17 134c 4109 2f73  .P...N..Z..LA./s
        0x0470:  6d80 ac4b 371e a9ba 01e7 3348 6719 f749  m..K7.....3Hg..I
        0x0480:  3274 4ee3 4ac1 6b5d fd7c bceb 398f 1633  2tN.J.k].|..9..3
        0x0490:  bb6d b629 6c0b 140d 7afe c53f d0d5 323d  .m.)l...z..?..2=
        0x04a0:  c15b 5d56 ff16 e3a9 0447 e820 a292 c271  .[]V.....G.....q
        0x04b0:  289d 4606 394c 1a2c 7836 76bc 3186 db98  (.F.9L.,x6v.1...
        0x04c0:  1e52 ab07 88c8 aa7d a97d 3591 01dd dd50  .R.....}.}5....P
        0x04d0:  e5be 7209 ffd1 4581 807a b3fe e3f6 8071  ..r...E..z.....q
        0x04e0:  2944 ea97 99ae 5a96 efaa 4799 3fca c9da  )D....Z...G.?...
        0x04f0:  0540 092e 00e3 7dc0 3117 cdee 379d 7714  .@....}.1...7.w.
        0x0500:  ef31 b190 e9ff aab0 b866 3c27 b8cd 3a8f  .1.......f<'..:.
        0x0510:  9930 2900 a288 de1b 1de5 aa4d e9b4 8f9a  .0)........M....
        0x0520:  4596 2367 c813 0a8f 4955 e9ff 1ef6 df55  E.#g....IU.....U
        0x0530:  0e19 ba64 c3ff 4623 8072 23f6 43b5 9f9b  ...d..F#.r#.C...
        0x0540:  dd86 058f 6b48 5924 5845 1b5b 674c 53f5  ....kHY$XE.[gLS.
        0x0550:  0eff a8b1 88f3 0917 01eb 2d9c b52d f768  ..........-..-.h
        0x0560:  107d d45c 1fda 0351 7f5f ed42 6790 31db  .}.\...Q._.Bg.1.
        0x0570:  c878 92a4 9046 0da6 a022 a227 a778 262d  .x...F...".'.x&-
        0x0580:  e5a5 50d3 0740 16dc 4502 4db2 e328 37e3  ..P..@..E.M..(7.
        0x0590:  3f46 830f 81ed 7c02 0d3d 8657 067d 887f  ?F....|..=.W.}..
        0x05a0:  7550 f676 37ac 6384 06ee 47d9 9909 c916  uP.v7.c...G.....
14:18:23.995410 IP 192.168.10.10 > 10.6.2.49: esp
        0x0000:  4500 00e0 8d1f 00af fb32 5a34 c0a8 0a0a  E........2Z4....
        0x0010:  0a06 0231 00ac f799 0000 0007 0000 0000  ...1............
        0x0020:  0000 0000 0384 71c9 5ef7 99c2 4bba c63d  ......q.^...K..=
        0x0030:  a562 f8f2 2aef e4dd cc60 038e d015 38a6  .b..*....`....8.
        0x0040:  cd64 8bd5 5d64 2fcd f059 a46e 08cd 4771  .d..]d/..Y.n..Gq
        0x0050:  a68a 6624 9957 7ace 5231 2626 3471 2061  ..f$.Wz.R1&&4q.a
        0x0060:  41a7 2a32 39d1 a259 5b5c 61d8 535e 9f39  A.*29..Y[\a.S^.9
        0x0070:  0da8 9c45 52b9 f6d3 c272 b2a7 f23a f868  ...ER....r...:.h
        0x0080:  6691 d0e1 a526 9ea5 9a5b 3534 6951 124e  f....&...[54iQ.N
        0x0090:  56da 592d 1cc0 6d75 29cb 15b4 f077 fa2c  V.Y-..mu)....w.,
        0x00a0:  2eff 178a baa8 889f b512 6585 f5da 6332  ..........e...c2
        0x00b0:  2670 2ab2 2eb6 66b2 19c7 a148 3872 2972  &p*...f....H8r)r
        0x00c0:  a967 6a77 d79f dffa e3f8 9e86 2a87 f0ba  .gjw........*...
        0x00d0:  4467 03fa 1d01 28a6 9a7e 46f9 6679 1fe8  Dg....(..~F.fy..

Could anyone tell me what is the issue.
Any help in this regard is greatly appreciated.

Thanks in advance,
Sujithra.
_______________________________________________
IPsec mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/ipsec