Project

General

Profile

Hardcopy Device Integrity Measurement Collector » History » Version 7

Andreas Steffen, 26.07.2015 11:23

1 3 Andreas Steffen
h1. Hardcopy Device Integrity Measurement Collector
2 1 Andreas Steffen
3 4 Andreas Steffen
The PA-TNC attributes of the HCD *carol* are defined in the *libimcv.plugins.imc-hcd* section of /etc/strongswan.conf:
4 1 Andreas Steffen
<pre>
5 1 Andreas Steffen
# /etc/strongswan.conf - strongSwan configuration file
6 1 Andreas Steffen
7 1 Andreas Steffen
charon {
8 1 Andreas Steffen
  load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown
9 1 Andreas Steffen
10 1 Andreas Steffen
  plugins {
11 1 Andreas Steffen
    eap-ttls {
12 1 Andreas Steffen
      max_message_count = 0
13 1 Andreas Steffen
    }
14 1 Andreas Steffen
    eap-tnc {
15 1 Andreas Steffen
      max_message_count = 0
16 1 Andreas Steffen
    }
17 1 Andreas Steffen
    tnccs-20 {
18 1 Andreas Steffen
      max_batch_size = 16370
19 1 Andreas Steffen
      max_message_size = 16338
20 1 Andreas Steffen
    }
21 1 Andreas Steffen
  }
22 1 Andreas Steffen
}
23 1 Andreas Steffen
24 1 Andreas Steffen
libimcv {
25 1 Andreas Steffen
  os_info {
26 1 Andreas Steffen
    name = strongPrint OS
27 1 Andreas Steffen
    version = 1.0
28 1 Andreas Steffen
    default_password_enabled = yes
29 1 Andreas Steffen
  }
30 1 Andreas Steffen
31 1 Andreas Steffen
  plugins {
32 1 Andreas Steffen
    imc-hcd {
33 1 Andreas Steffen
      push_info = no 
34 1 Andreas Steffen
      subtypes {
35 1 Andreas Steffen
        system {
36 1 Andreas Steffen
          attributes_natural_language = en
37 1 Andreas Steffen
          machine_type_model = strongPrint Laser X.509a
38 1 Andreas Steffen
          vendor_name = ITA-HSR
39 1 Andreas Steffen
          vendor_smi_code = 36906
40 1 Andreas Steffen
          pstn_fax_enabled = yes
41 1 Andreas Steffen
          time_source = 0.ch.pool.ntp.org
42 1 Andreas Steffen
          user_application_enabled = yes
43 1 Andreas Steffen
          user_application_persistence_enabled = no
44 1 Andreas Steffen
45 1 Andreas Steffen
          firmware {
46 4 Andreas Steffen
            fw-1 {
47 1 Andreas Steffen
              name = Firmware ABC 
48 1 Andreas Steffen
              patches = "security patch 2014-05-08\nupgrade 2014-08-16\nsecurity patch 2015-3-22"
49 1 Andreas Steffen
              string_version = 1.0.7
50 1 Andreas Steffen
              version = 00000001000000000000000700000000
51 1 Andreas Steffen
            }
52 7 Andreas Steffen
            fw-2 {
53 1 Andreas Steffen
              name = Firmware UVW 
54 1 Andreas Steffen
              string_version = 13.8.5
55 1 Andreas Steffen
              version = 0000000D000000080000000500000000
56 1 Andreas Steffen
            }
57 1 Andreas Steffen
          }
58 1 Andreas Steffen
59 1 Andreas Steffen
          resident_application {
60 1 Andreas Steffen
            resident-app-1 {
61 1 Andreas Steffen
              name = Resident App XYZ 
62 1 Andreas Steffen
              patches = "xmas patch 2014-12-24\nservice patch 2015-05-22"
63 1 Andreas Steffen
              string_version = 2.5
64 1 Andreas Steffen
              version = 00000002000000050000000000000000
65 1 Andreas Steffen
            }
66 1 Andreas Steffen
          }
67 1 Andreas Steffen
68 1 Andreas Steffen
          user_application {
69 1 Andreas Steffen
            user-app-1 {
70 1 Andreas Steffen
              name = My Java Photo App
71 1 Andreas Steffen
              patches =
72 1 Andreas Steffen
              string_version = 5.2.3.8.1
73 1 Andreas Steffen
              version = 00000005000000020000000300080001
74 1 Andreas Steffen
            }
75 1 Andreas Steffen
            user-app-2 {
76 1 Andreas Steffen
              name = Print Your Dinosaur!
77 1 Andreas Steffen
              patches =
78 1 Andreas Steffen
              string_version = 1.0
79 1 Andreas Steffen
              version = 00000001000000000000000000000000
80 1 Andreas Steffen
            }
81 1 Andreas Steffen
            user-app-3 {
82 1 Andreas Steffen
              name = Label Everything App
83 1 Andreas Steffen
              patches =
84 1 Andreas Steffen
              string_version = 7.5.8.2.3
85 1 Andreas Steffen
              version = 0000000700000050000000800020003
86 1 Andreas Steffen
            }
87 1 Andreas Steffen
          }
88 1 Andreas Steffen
89 1 Andreas Steffen
          certification_state = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
90 1 Andreas Steffen
          configuration_state = f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffe0e1e2e3e4e5e6e7e8e9eaebecedeeefd0d1d2d3d4d5d6d7d8d9dadbdcdddedf
91 1 Andreas Steffen
        }
92 1 Andreas Steffen
93 1 Andreas Steffen
        console {
94 1 Andreas Steffen
          attributes_natural_language = ru
95 1 Andreas Steffen
        }
96 1 Andreas Steffen
97 1 Andreas Steffen
        marker {
98 1 Andreas Steffen
          attributes_natural_language = fr
99 1 Andreas Steffen
        }
100 1 Andreas Steffen
101 1 Andreas Steffen
        finisher {
102 1 Andreas Steffen
          attributes_natural_language = de
103 1 Andreas Steffen
        }
104 1 Andreas Steffen
105 1 Andreas Steffen
        interface {
106 1 Andreas Steffen
          attributes_natural_language = en
107 1 Andreas Steffen
 
108 1 Andreas Steffen
          resident_application {
109 6 Andreas Steffen
            resident-app-if {
110 1 Andreas Steffen
              name = Resident App Interface+ 
111 1 Andreas Steffen
              patches = "service patch 2015-02-09"
112 1 Andreas Steffen
              string_version = 2.5
113 1 Andreas Steffen
              version = 00000002000000050000000000000000
114 1 Andreas Steffen
            }
115 1 Andreas Steffen
          }
116 1 Andreas Steffen
        }
117 1 Andreas Steffen
118 1 Andreas Steffen
        scanner {
119 1 Andreas Steffen
          attributes_natural_language = en
120 1 Andreas Steffen
 
121 1 Andreas Steffen
          firmware {
122 1 Andreas Steffen
            fw-scanner {
123 1 Andreas Steffen
              name = Scanner Firmware 
124 1 Andreas Steffen
              patches = "security patch 2013-08-11\nsecurity patch 2015-5-30"
125 1 Andreas Steffen
              string_version = 2.5.3
126 1 Andreas Steffen
              version = 00000002000000050000000300000000
127 1 Andreas Steffen
            }
128 1 Andreas Steffen
          }
129 1 Andreas Steffen
130 1 Andreas Steffen
          user_application {
131 1 Andreas Steffen
            user-app-scanner {
132 1 Andreas Steffen
              name = EasyScan
133 1 Andreas Steffen
              patches =
134 1 Andreas Steffen
              string_version = 2.2.3.5.7
135 1 Andreas Steffen
              version = 00000002000000020000000300050007
136 1 Andreas Steffen
            }
137 1 Andreas Steffen
          }
138 1 Andreas Steffen
        }
139 1 Andreas Steffen
      }
140 1 Andreas Steffen
    }
141 1 Andreas Steffen
  }
142 1 Andreas Steffen
}
143 1 Andreas Steffen
</pre>
144 1 Andreas Steffen
145 4 Andreas Steffen
The TNC transport protocol is PT-EAP over IKEv2-EAP. In a first step the IKEv2 charon daemon is started up.
146 1 Andreas Steffen
<pre>
147 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.3.3dr1, Linux 4.0.9, x86_64)
148 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
149 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG]   loaded ca certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" from '/etc/ipsec.d/cacerts/strongswanCert.pem'
150 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
151 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
152 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
153 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
154 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
155 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[CFG]   loaded EAP secret for carol
156 1 Andreas Steffen
</pre>
157 2 Andreas Steffen
158 4 Andreas Steffen
Next the OS and HCD IMCs are loaded. The OS IMC subscribes to the IETF standard *Operating System* PA subtype and the HCD IMC to the mandatory  *System* and the five recommended *Console*, *Marker*, *Finisher*, *Interface* and *Scanner* PWG HCD PA subtypes. 
159 2 Andreas Steffen
<pre>
160 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] loading IMCs from '/etc/tnc_config'
161 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] added IETF attributes
162 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] added ITA-HSR attributes
163 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] added PWG attributes
164 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] added TCG attributes
165 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[LIB] libimcv initialized
166 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] IMC 1 "OS" initialized
167 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] operating system name is 'strongPrint OS'
168 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] operating system version is '1.0'
169 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] IMC 1 supports 1 message type: 'IETF/Operating System' 0x000000/0x00000001
170 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] IMC 1 "OS" loaded from '/usr/local/lib/ipsec/imcvs/imc-os.so'
171 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] IMC 2 "HCD" initialized
172 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] operating system name is 'strongPrint OS'
173 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[IMC] operating system version is '1.0'
174 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] IMC 2 supports 6 message types: 'PWG/HCD System' 0x000a8b/0x00000005 'PWG/HCD Console' 0x000a8b/0x00000004 'PWG/HCD Marker' 0x000a8b/0x0000000a 'PWG/HCD Finisher' 0x000a8b/0x0000001e 'PWG/HCD Interface' 0x000a8b/0x00000028 'PWG/HCD Scanner' 0x000a8b/0x00000032
175 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[TNC] IMC 2 "HCD" loaded from '/usr/local/lib/ipsec/imcvs/imc-hcd.so'
176 1 Andreas Steffen
</pre>
177 2 Andreas Steffen
178 4 Andreas Steffen
The VPN client loads the definition for the IPsec connection to the VPN gateway
179 2 Andreas Steffen
<pre>
180 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[LIB] loaded plugins: charon aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown
181 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 00[JOB] spawning 16 worker threads
182 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 09[CFG] received stroke: add connection 'home'
183 1 Andreas Steffen
Jul 25 16:12:40 carol charon: 09[CFG] added configuration 'home'
184 2 Andreas Steffen
</pre>
185 2 Andreas Steffen
186 5 Andreas Steffen
The VPN client *carol* starts the IKEv2 negotiation with the VPN gateway *moon*. The user authentication and the subsequent PT-EAP setup takes place with the RADIUS server *alice* located behind the VPN gateway.
187 2 Andreas Steffen
<pre>
188 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 10[CFG] received stroke: initiate 'home'
189 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[IKE] initiating IKE_SA home[1] to 192.168.0.1
190 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]
191 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[NET] sending packet: from 192.168.0.100[500] to 192.168.0.1[500] (692 bytes)
192 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[NET] received packet: from 192.168.0.1[500] to 192.168.0.100[500] (448 bytes)
193 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]
194 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IKE] sending cert request for "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
195 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IKE] establishing CHILD_SA home
196 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ IDr SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) N(EAP_ONLY) ]
197 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (412 bytes)
198 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (1452 bytes)
199 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[ENC] parsed IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/ID ]
200 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[IKE] received end entity cert "C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
201 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   using certificate "C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
202 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   using trusted ca certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
203 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG] checking certificate status of "C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
204 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   fetching crl from 'http://crl.strongswan.org/strongswan.crl' ...
205 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   using trusted certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
206 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   crl correctly signed by "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
207 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   crl is valid: until Aug 24 16:12:17 2015
208 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG] certificate status is good
209 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[CFG]   reached self-signed root ca with a path length of 0
210 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[IKE] authentication of 'moon.strongswan.org' with RSA_EMSA_PKCS1_SHA256 successful
211 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[IKE] server requested EAP_IDENTITY (id 0x00), sending 'carol'
212 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ]
213 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (76 bytes)
214 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (76 bytes)
215 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/TTLS ]
216 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[IKE] server requested EAP_TTLS authentication (id 0xF0)
217 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[TLS] EAP_TTLS version is v0
218 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[ENC] generating IKE_AUTH request 3 [ EAP/RES/TTLS ]
219 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (172 bytes)
220 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 15[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (1100 bytes)
221 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 15[ENC] parsed IKE_AUTH response 3 [ EAP/REQ/TTLS ]
222 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 15[ENC] generating IKE_AUTH request 4 [ EAP/RES/TTLS ]
223 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 15[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (76 bytes)
224 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (1084 bytes)
225 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[ENC] parsed IKE_AUTH response 4 [ EAP/REQ/TTLS ]
226 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[TLS] negotiated TLS 1.2 using suite TLS_DHE_RSA_WITH_AES_128_CBC_SHA
227 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[TLS] received TLS server certificate 'C=CH, O=Linux strongSwan, CN=aaa.strongswan.org'
228 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   using certificate "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
229 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   using trusted ca certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
230 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG] checking certificate status of "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
231 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   using trusted certificate "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
232 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   crl correctly signed by "C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
233 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   crl is valid: until Aug 24 16:12:17 2015
234 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   using cached crl
235 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG] certificate status is good
236 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[CFG]   reached self-signed root ca with a path length of 0
237 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[TLS] received TLS cert request for 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA
238 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[TLS] no TLS peer certificate found for 'carol', skipping client authentication
239 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[ENC] generating IKE_AUTH request 5 [ EAP/RES/TTLS ]
240 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 16[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (428 bytes)
241 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (220 bytes)
242 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[ENC] parsed IKE_AUTH response 5 [ EAP/REQ/TTLS ]
243 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/ID]
244 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[IKE] server requested EAP_IDENTITY authentication (id 0x00)
245 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/ID]
246 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[ENC] generating IKE_AUTH request 6 [ EAP/RES/TTLS ]
247 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 02[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (156 bytes)
248 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (172 bytes)
249 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[ENC] parsed IKE_AUTH response 6 [ EAP/REQ/TTLS ]
250 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/MD5]
251 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[IKE] server requested EAP_MD5 authentication (id 0x46)
252 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/MD5]
253 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[ENC] generating IKE_AUTH request 7 [ EAP/RES/TTLS ]
254 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 01[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (172 bytes)
255 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (156 bytes)
256 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[ENC] parsed IKE_AUTH response 7 [ EAP/REQ/TTLS ]
257 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/PT]
258 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IKE] server requested EAP_PT_EAP authentication (id 0xBE)
259 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TLS] EAP_PT_EAP version is v1
260 2 Andreas Steffen
</pre>
261 2 Andreas Steffen
262 5 Andreas Steffen
THE PB-TNC connection between TNC client and TNC server is established. The maximum size of  a PA-TNC message is limited to 16338 bytes.
263 2 Andreas Steffen
<pre>
264 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] TNC client is handling outbound connection
265 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] assigned TNCCS Connection ID 1
266 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] IMC 1 "OS" created a state for IF-TNCCS 2.0 Connection ID 1: +long +excl -soh
267 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   over IF-T for Tunneled EAP 2.0 with maximum PA-TNC message size of 16338 bytes
268 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] IMC 2 "HCD" created a state for IF-TNCCS 2.0 Connection ID 1: +long +excl -soh
269 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   over IF-T for Tunneled EAP 2.0 with maximum PA-TNC message size of 16338 bytes
270 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] IMC 1 "OS" changed state of Connection ID 1 to 'Handshake'
271 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] IMC 2 "HCD" changed state of Connection ID 1 to 'Handshake'
272 2 Andreas Steffen
</pre>
273 1 Andreas Steffen
274 6 Andreas Steffen
The OS IMC retrieves information on the operating system
275 2 Andreas Steffen
<pre>
276 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] operating system numeric version is 1.0
277 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] last boot: Jul 25 16:12:26 UTC 2015, 15 s ago
278 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] IPv4 forwarding is disabled
279 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] factory default password is enabled
280 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] device ID is 79433e32cfc1d0d3e7a637c954f0870e
281 2 Andreas Steffen
</pre>
282 1 Andreas Steffen
283 6 Andreas Steffen
The OS IMC is sending operating system information using IETF standard attributes
284 2 Andreas Steffen
<pre>
285 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x1c2fcae3
286 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/Product Information' 0x000000/0x00000002
287 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/String Version' 0x000000/0x00000004
288 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/Numeric Version' 0x000000/0x00000003
289 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/Operational Status' 0x000000/0x00000005
290 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/Forwarding Enabled' 0x000000/0x0000000b
291 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'IETF/Factory Default Password Enabled' 0x000000/0x0000000c
292 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'ITA-HSR/Device ID' 0x00902a/0x00000008
293 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 197 bytes @ 0x7b01d0
294 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 1C 2F CA E3 00 00 00 00 00 00 00 02  ...../..........
295 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 1F 00 00 00 00 00 73 74 72 6F 6E 67 50  .........strongP
296 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   32: 72 69 6E 74 20 4F 53 00 00 00 00 00 00 00 04 00  rint OS.........
297 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   48: 00 00 12 03 31 2E 30 00 00 00 00 00 00 00 00 00  ....1.0.........
298 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   64: 03 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00  ................
299 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   80: 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00  ................
300 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   96: 24 03 01 00 00 32 30 31 35 2D 30 37 2D 32 35 54  $....2015-07-25T
301 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  112: 31 36 3A 31 32 3A 32 36 5A 00 00 00 00 00 00 00  16:12:26Z.......
302 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  128: 0B 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00  ................
303 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  144: 0C 00 00 00 10 00 00 00 01 00 00 90 2A 00 00 00  ............*...
304 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  160: 08 00 00 00 2C 37 39 34 33 33 65 33 32 63 66 63  ....,79433e32cfc
305 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  176: 31 64 30 64 33 65 37 61 36 33 37 63 39 35 34 66  1d0d3e7a637c954f
306 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  192: 30 38 37 30 65                                   0870e
307 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001
308 2 Andreas Steffen
</pre>
309 1 Andreas Steffen
310 6 Andreas Steffen
The HCD IMC is retrieving attributes for PA subtype PWG/HCD System
311 2 Andreas Steffen
<pre>
312 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD System
313 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: en
314 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD DefaultPasswordEnabled: yes
315 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD ForwardingEnabled: disabled
316 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD MachineTypeModel: strongPrint Laser X.509a
317 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD PSTNFaxEnabled: yes
318 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD TimeSource: 0.ch.pool.ntp.org
319 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD VendorName: ITA-HSR
320 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD VendorSMICode: 0x00902a (36906)
321 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD UserApplicationEnabled: yes
322 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD UserApplicationPersistenceEnabled: no
323 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x4b54dbfa
324 2 Andreas Steffen
</pre>
325 2 Andreas Steffen
326 2 Andreas Steffen
<pre>
327 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
328 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD DefaultPasswordEnabled' 0x000a8b/0x00000014
329 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD ForwardingEnabled' 0x000a8b/0x00000016
330 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD MachineTypeModel' 0x000a8b/0x00000002
331 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD PSTNFaxEnabled' 0x000a8b/0x00000028
332 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD TimeSource' 0x000a8b/0x00000032
333 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD VendorName' 0x000a8b/0x00000003
334 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD VendorSMICode' 0x000a8b/0x00000004
335 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationEnabled' 0x000a8b/0x00000068
336 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationPersistenceEnabled' 0x000a8b/0x00000069
337 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 202 bytes @ 0x7b2370
338 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 4B 54 DB FA 00 00 0A 8B 00 00 00 01  ....KT..........
339 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 65 6E 00 00 0A 8B 00 00 00 14 00 00  ....en..........
340 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   32: 00 10 00 00 00 01 00 00 0A 8B 00 00 00 16 00 00  ................
341 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   48: 00 10 00 00 00 00 00 00 0A 8B 00 00 00 02 00 00  ................
342 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   64: 00 24 73 74 72 6F 6E 67 50 72 69 6E 74 20 4C 61  .$strongPrint La
343 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   80: 73 65 72 20 58 2E 35 30 39 61 00 00 0A 8B 00 00  ser X.509a......
344 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   96: 00 28 00 00 00 10 00 00 00 01 00 00 0A 8B 00 00  .(..............
345 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  112: 00 32 00 00 00 1D 30 2E 63 68 2E 70 6F 6F 6C 2E  .2....0.ch.pool.
346 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  128: 6E 74 70 2E 6F 72 67 00 00 0A 8B 00 00 00 03 00  ntp.org.........
347 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  144: 00 00 13 49 54 41 2D 48 53 52 00 00 0A 8B 00 00  ...ITA-HSR......
348 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  160: 00 04 00 00 00 10 00 00 90 2A 00 00 0A 8B 00 00  .........*......
349 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  176: 00 68 00 00 00 10 00 00 00 01 00 00 0A 8B 00 00  .h..............
350 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]  192: 00 69 00 00 00 10 00 00 00 00                    .i........
351 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD System' 0x000a8b/0x00000005
352 2 Andreas Steffen
</pre>
353 2 Andreas Steffen
354 2 Andreas Steffen
<pre>
355 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD Console
356 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: ru
357 2 Andreas Steffen
</pre>
358 2 Andreas Steffen
359 2 Andreas Steffen
<pre>
360 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x479c3ead
361 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
362 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 22 bytes @ 0x7b1500
363 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 47 9C 3E AD 00 00 0A 8B 00 00 00 01  ....G.>.........
364 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 72 75                                ....ru
365 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD Console' 0x000a8b/0x00000004
366 5 Andreas Steffen
</pre>
367 5 Andreas Steffen
368 5 Andreas Steffen
<pre>
369 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD Marker
370 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: fr
371 5 Andreas Steffen
</pre>
372 5 Andreas Steffen
373 5 Andreas Steffen
<pre>
374 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x5009e6e8
375 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
376 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 22 bytes @ 0x7af030
377 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 50 09 E6 E8 00 00 0A 8B 00 00 00 01  ....P...........
378 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 66 72                                ....fr
379 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD Marker' 0x000a8b/0x0000000a
380 2 Andreas Steffen
</pre>
381 2 Andreas Steffen
382 2 Andreas Steffen
<pre>
383 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD Finisher
384 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: de
385 2 Andreas Steffen
</pre>
386 2 Andreas Steffen
387 2 Andreas Steffen
<pre>
388 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x22540aee
389 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
390 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 22 bytes @ 0x7b28d0
391 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 22 54 0A EE 00 00 0A 8B 00 00 00 01  ...."T..........
392 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 64 65                                ....de
393 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD Finisher' 0x000a8b/0x0000001e
394 2 Andreas Steffen
</pre>
395 2 Andreas Steffen
396 2 Andreas Steffen
<pre>
397 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD Interface
398 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: en
399 2 Andreas Steffen
</pre>
400 2 Andreas Steffen
401 2 Andreas Steffen
<pre>
402 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x24f0da1d
403 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
404 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 22 bytes @ 0x7b17d0
405 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 24 F0 DA 1D 00 00 0A 8B 00 00 00 01  ....$...........
406 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 65 6E                                ....en
407 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD Interface' 0x000a8b/0x00000028
408 2 Andreas Steffen
</pre>
409 2 Andreas Steffen
410 2 Andreas Steffen
<pre>
411 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] retrieving attributes for PA subtype PWG/HCD Scanner
412 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   HCD AttributesNaturalLanguage: en
413 2 Andreas Steffen
</pre>
414 2 Andreas Steffen
415 2 Andreas Steffen
<pre>
416 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC message with ID 0x3a83eec4
417 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PA-TNC attribute type 'PWG/HCD AttributesNaturalLanguage' 0x000a8b/0x00000001
418 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC] created PA-TNC message: => 22 bytes @ 0x7b2c70
419 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]    0: 01 00 00 00 3A 83 EE C4 00 00 0A 8B 00 00 00 01  ....:...........
420 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IMC]   16: 00 00 00 0E 65 6E                                ....en
421 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-PA message type 'PWG/HCD Scanner' 0x000a8b/0x00000032
422 2 Andreas Steffen
</pre>
423 2 Andreas Steffen
424 2 Andreas Steffen
<pre>
425 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] PB-TNC state transition from 'Init' to 'Server Working'
426 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] creating PB-TNC CDATA batch
427 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-Language-Preference message
428 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
429 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
430 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
431 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
432 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
433 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
434 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] adding IETF/PB-PA message
435 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[TNC] sending PB-TNC CDATA batch (716 bytes) for Connection ID 1
436 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/PT]
437 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[ENC] generating IKE_AUTH request 8 [ EAP/RES/TTLS ]
438 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 04[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (876 bytes)
439 2 Andreas Steffen
</pre>
440 2 Andreas Steffen
441 2 Andreas Steffen
<pre>
442 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (748 bytes)
443 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[ENC] parsed IKE_AUTH response 8 [ EAP/REQ/TTLS ]
444 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/PT]
445 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] received TNCCS batch (602 bytes)
446 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] TNC client is handling inbound connection
447 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PB-TNC SDATA batch for Connection ID 1
448 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] PB-TNC state transition from 'Server Working' to 'Client Working'
449 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing TCG/PB-PDP-Referral message (42 bytes)
450 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (112 bytes)
451 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (88 bytes)
452 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (88 bytes)
453 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (88 bytes)
454 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (88 bytes)
455 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing IETF/PB-PA message (88 bytes)
456 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] PDP server 'aaa.strongswan.org' is listening on port 271
457 2 Andreas Steffen
</pre>
458 2 Andreas Steffen
459 2 Andreas Steffen
<pre>
460 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD System' 0x000a8b/0x00000005
461 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
462 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 88 bytes @ 0x7b3ed0
463 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 9D 9D 53 E5 00 00 55 97 00 00 00 21  ......S...U....!
464 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
465 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 3C 00 00 0A 8B 00 00 00 15  .......<........
466 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 3C 00 00 0A 8B 00 00 00 50  .......<.......P
467 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   64: 00 00 0A 8B 00 00 00 64 00 00 0A 8B 00 00 00 C8  .......d........
468 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   80: 00 00 0A 8B 00 00 00 C9                          ........
469 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0x9d9d53e5
470 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
471 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
472 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000015 'PWG/HCD FirewallSetting'
473 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
474 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
475 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
476 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x000000c8 'PWG/HCD CertificationState'
477 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x000000c9 'PWG/HCD ConfigurationState'
478 2 Andreas Steffen
</pre>
479 2 Andreas Steffen
480 2 Andreas Steffen
<pre>
481 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD System' 0x000a8b/0x00000005
482 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
483 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
484 2 Andreas Steffen
</pre>
485 2 Andreas Steffen
486 2 Andreas Steffen
<pre>
487 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- fw-1 ---
488 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareName: Firmware ABC
489 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwarePatches: security patch 2014-05-08
490 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] upgrade 2014-08-16
491 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] security patch 2015-3-22
492 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareStringVersion: 1.0.7
493 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareVersion: 00:00:00:01:00:00:00:00:00:00:00:07:00:00:00:00
494 2 Andreas Steffen
</pre>
495 2 Andreas Steffen
496 2 Andreas Steffen
<pre>
497 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- fw-2 ---
498 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareName: Firmware UVW
499 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwarePatches: 
500 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareStringVersion: 13.8.5
501 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareVersion: 00:00:00:0d:00:00:00:08:00:00:00:05:00:00:00:00
502 2 Andreas Steffen
</pre>
503 2 Andreas Steffen
504 2 Andreas Steffen
<pre>
505 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- resident-app-1 ---
506 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationName: Resident App XYZ
507 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationPatches: xmas patch 2014-12-24
508 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] service patch 2015-05-22
509 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationStringVersion: 2.5
510 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationVersion: 00:00:00:02:00:00:00:05:00:00:00:00:00:00:00:00
511 2 Andreas Steffen
</pre>
512 2 Andreas Steffen
513 2 Andreas Steffen
<pre>
514 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- user-app-1 ---
515 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationName: My Java Photo App
516 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationPatches: 
517 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationStringVersion: 5.2.3.8.1
518 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationVersion: 00:00:00:05:00:00:00:02:00:00:00:03:00:08:00:01
519 2 Andreas Steffen
</pre>
520 2 Andreas Steffen
521 2 Andreas Steffen
<pre>
522 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- user-app-2 ---
523 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationName: Print Your Dinosaur!
524 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationPatches: 
525 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationStringVersion: 1.0
526 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationVersion: 00:00:00:01:00:00:00:00:00:00:00:00:00:00:00:00
527 2 Andreas Steffen
</pre>
528 2 Andreas Steffen
529 2 Andreas Steffen
<pre>
530 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- user-app-3 ---
531 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationName: Label Everything App
532 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationPatches: 
533 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationStringVersion: 7.5.8.2.3
534 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationVersion: 00:00:00:00:70:00:00:05:00:00:00:08:00:02:00:03
535 2 Andreas Steffen
</pre>
536 2 Andreas Steffen
537 2 Andreas Steffen
<pre>
538 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD CertificationState: => 32 bytes @ 0x7b7010
539 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F  ................
540 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F  ................
541 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ConfigurationState: => 48 bytes @ 0x7bbb40
542 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: F0 F1 F2 F3 F4 F5 F6 F7 F8 F9 FA FB FC FD FE FF  ................
543 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: E0 E1 E2 E3 E4 E5 E6 E7 E8 E9 EA EB EC ED EE EF  ................
544 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: D0 D1 D2 D3 D4 D5 D6 D7 D8 D9 DA DB DC DD DE DF  ................
545 2 Andreas Steffen
</pre>
546 2 Andreas Steffen
547 2 Andreas Steffen
<pre>
548 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0xa4007712
549 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
550 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareName' 0x000a8b/0x0000003c
551 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwarePatches' 0x000a8b/0x0000003d
552 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareStringVersion' 0x000a8b/0x0000003e
553 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareVersion' 0x000a8b/0x0000003f
554 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareName' 0x000a8b/0x0000003c
555 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwarePatches' 0x000a8b/0x0000003d
556 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareStringVersion' 0x000a8b/0x0000003e
557 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareVersion' 0x000a8b/0x0000003f
558 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationName' 0x000a8b/0x00000050
559 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationPatches' 0x000a8b/0x00000051
560 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationStringVersion' 0x000a8b/0x00000052
561 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationVersion' 0x000a8b/0x00000053
562 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationName' 0x000a8b/0x00000064
563 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationPatches' 0x000a8b/0x00000065
564 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationStringVersion' 0x000a8b/0x00000066
565 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationVersion' 0x000a8b/0x00000067
566 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationName' 0x000a8b/0x00000064
567 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationPatches' 0x000a8b/0x00000065
568 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationStringVersion' 0x000a8b/0x00000066
569 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationVersion' 0x000a8b/0x00000067
570 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationName' 0x000a8b/0x00000064
571 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationPatches' 0x000a8b/0x00000065
572 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationStringVersion' 0x000a8b/0x00000066
573 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationVersion' 0x000a8b/0x00000067
574 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD CertificationState' 0x000a8b/0x000000c8
575 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ConfigurationState' 0x000a8b/0x000000c9
576 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 763 bytes @ 0x7bdfb0
577 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 A4 00 77 12 00 00 55 97 00 00 00 22  ......w...U...."
578 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6 00 00 0A 8B  ..........?.....
579 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 3C 00 00 00 18 46 69 72 6D 77 61 72 65  ...<....Firmware
580 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 20 41 42 43 00 00 0A 8B 00 00 00 3D 00 00 00 51   ABC.......=...Q
581 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   64: 73 65 63 75 72 69 74 79 20 70 61 74 63 68 20 32  security patch 2
582 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   80: 30 31 34 2D 30 35 2D 30 38 0A 75 70 67 72 61 64  014-05-08.upgrad
583 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   96: 65 20 32 30 31 34 2D 30 38 2D 31 36 0A 73 65 63  e 2014-08-16.sec
584 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  112: 75 72 69 74 79 20 70 61 74 63 68 20 32 30 31 35  urity patch 2015
585 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  128: 2D 33 2D 32 32 00 00 0A 8B 00 00 00 3E 00 00 00  -3-22.......>...
586 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  144: 11 31 2E 30 2E 37 00 00 0A 8B 00 00 00 3F 00 00  .1.0.7.......?..
587 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  160: 00 1C 00 00 00 01 00 00 00 00 00 00 00 07 00 00  ................
588 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  176: 00 00 00 00 0A 8B 00 00 00 3C 00 00 00 18 46 69  .........<....Fi
589 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  192: 72 6D 77 61 72 65 20 55 56 57 00 00 0A 8B 00 00  rmware UVW......
590 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  208: 00 3D 00 00 00 0C 00 00 0A 8B 00 00 00 3E 00 00  .=...........>..
591 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  224: 00 12 31 33 2E 38 2E 35 00 00 0A 8B 00 00 00 3F  ..13.8.5.......?
592 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  240: 00 00 00 1C 00 00 00 0D 00 00 00 08 00 00 00 05  ................
593 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  256: 00 00 00 00 00 00 0A 8B 00 00 00 50 00 00 00 1C  ...........P....
594 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  272: 52 65 73 69 64 65 6E 74 20 41 70 70 20 58 59 5A  Resident App XYZ
595 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  288: 00 00 0A 8B 00 00 00 51 00 00 00 3A 78 6D 61 73  .......Q...:xmas
596 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  304: 20 70 61 74 63 68 20 32 30 31 34 2D 31 32 2D 32   patch 2014-12-2
597 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  320: 34 0A 73 65 72 76 69 63 65 20 70 61 74 63 68 20  4.service patch 
598 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  336: 32 30 31 35 2D 30 35 2D 32 32 00 00 0A 8B 00 00  2015-05-22......
599 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  352: 00 52 00 00 00 0F 32 2E 35 00 00 0A 8B 00 00 00  .R....2.5.......
600 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  368: 53 00 00 00 1C 00 00 00 02 00 00 00 05 00 00 00  S...............
601 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  384: 00 00 00 00 00 00 00 0A 8B 00 00 00 64 00 00 00  ............d...
602 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  400: 1D 4D 79 20 4A 61 76 61 20 50 68 6F 74 6F 20 41  .My Java Photo A
603 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  416: 70 70 00 00 0A 8B 00 00 00 65 00 00 00 0C 00 00  pp.......e......
604 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  432: 0A 8B 00 00 00 66 00 00 00 15 35 2E 32 2E 33 2E  .....f....5.2.3.
605 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  448: 38 2E 31 00 00 0A 8B 00 00 00 67 00 00 00 1C 00  8.1.......g.....
606 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  464: 00 00 05 00 00 00 02 00 00 00 03 00 08 00 01 00  ................
607 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  480: 00 0A 8B 00 00 00 64 00 00 00 20 50 72 69 6E 74  ......d... Print
608 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  496: 20 59 6F 75 72 20 44 69 6E 6F 73 61 75 72 21 00   Your Dinosaur!.
609 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  512: 00 0A 8B 00 00 00 65 00 00 00 0C 00 00 0A 8B 00  ......e.........
610 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  528: 00 00 66 00 00 00 0F 31 2E 30 00 00 0A 8B 00 00  ..f....1.0......
611 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  544: 00 67 00 00 00 1C 00 00 00 01 00 00 00 00 00 00  .g..............
612 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  560: 00 00 00 00 00 00 00 00 0A 8B 00 00 00 64 00 00  .............d..
613 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  576: 00 20 4C 61 62 65 6C 20 45 76 65 72 79 74 68 69  . Label Everythi
614 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  592: 6E 67 20 41 70 70 00 00 0A 8B 00 00 00 65 00 00  ng App.......e..
615 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  608: 00 0C 00 00 0A 8B 00 00 00 66 00 00 00 15 37 2E  .........f....7.
616 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  624: 35 2E 38 2E 32 2E 33 00 00 0A 8B 00 00 00 67 00  5.8.2.3.......g.
617 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  640: 00 00 1C 00 00 00 00 70 00 00 05 00 00 00 08 00  .......p........
618 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  656: 02 00 03 00 00 0A 8B 00 00 00 C8 00 00 00 2C 00  ..............,.
619 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  672: 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10  ................
620 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  688: 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F 00  ................
621 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  704: 00 0A 8B 00 00 00 C9 00 00 00 3C F0 F1 F2 F3 F4  ..........<.....
622 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  720: F5 F6 F7 F8 F9 FA FB FC FD FE FF E0 E1 E2 E3 E4  ................
623 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  736: E5 E6 E7 E8 E9 EA EB EC ED EE EF D0 D1 D2 D3 D4  ................
624 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  752: D5 D6 D7 D8 D9 DA DB DC DD DE DF                 ...........
625 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD System' 0x000a8b/0x00000005
626 2 Andreas Steffen
</pre>
627 2 Andreas Steffen
628 2 Andreas Steffen
<pre>
629 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD Console' 0x000a8b/0x00000004
630 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
631 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 64 bytes @ 0x7b6af0
632 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 44 55 6E 76 00 00 55 97 00 00 00 21  ....DUnv..U....!
633 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
634 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 24 00 00 0A 8B 00 00 00 3C  .......$.......<
635 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 50 00 00 0A 8B 00 00 00 64  .......P.......d
636 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0x44556e76
637 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
638 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
639 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
640 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
641 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
642 2 Andreas Steffen
</pre>
643 2 Andreas Steffen
644 2 Andreas Steffen
<pre>
645 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD Console' 0x000a8b/0x00000004
646 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
647 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
648 2 Andreas Steffen
</pre>
649 2 Andreas Steffen
650 2 Andreas Steffen
<pre>
651 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0x10f5116c
652 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
653 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 28 bytes @ 0x7b54d0
654 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 10 F5 11 6C 00 00 55 97 00 00 00 22  .......l..U...."
655 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6              ..........?.
656 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD Console' 0x000a8b/0x00000004
657 3 Andreas Steffen
</pre>
658 3 Andreas Steffen
659 3 Andreas Steffen
<pre>
660 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD Marker' 0x000a8b/0x0000000a
661 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
662 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 64 bytes @ 0x7b37d0
663 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 CE 8C F5 6C 00 00 55 97 00 00 00 21  .......l..U....!
664 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
665 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 24 00 00 0A 8B 00 00 00 3C  .......$.......<
666 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 50 00 00 0A 8B 00 00 00 64  .......P.......d
667 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0xce8cf56c
668 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
669 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
670 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
671 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
672 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
673 3 Andreas Steffen
</pre>
674 3 Andreas Steffen
675 3 Andreas Steffen
<pre>
676 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD Marker' 0x000a8b/0x0000000a
677 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
678 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
679 3 Andreas Steffen
</pre>
680 3 Andreas Steffen
681 3 Andreas Steffen
<pre>
682 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0xcf94b8d7
683 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
684 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 28 bytes @ 0x7b67e0
685 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 CF 94 B8 D7 00 00 55 97 00 00 00 22  ..........U...."
686 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6              ..........?.
687 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD Marker' 0x000a8b/0x0000000a
688 3 Andreas Steffen
</pre>
689 3 Andreas Steffen
690 3 Andreas Steffen
<pre>
691 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD Finisher' 0x000a8b/0x0000001e
692 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
693 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 64 bytes @ 0x7b3c90
694 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 1E FC 7B AE 00 00 55 97 00 00 00 21  ......{...U....!
695 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
696 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 24 00 00 0A 8B 00 00 00 3C  .......$.......<
697 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 50 00 00 0A 8B 00 00 00 64  .......P.......d
698 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0x1efc7bae
699 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
700 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
701 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
702 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
703 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
704 3 Andreas Steffen
</pre>
705 3 Andreas Steffen
706 3 Andreas Steffen
<pre>
707 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD Finisher' 0x000a8b/0x0000001e
708 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
709 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
710 3 Andreas Steffen
</pre>
711 3 Andreas Steffen
712 3 Andreas Steffen
<pre>
713 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0x19f5d207
714 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
715 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 28 bytes @ 0x7b4980
716 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 19 F5 D2 07 00 00 55 97 00 00 00 22  ..........U...."
717 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6              ..........?.
718 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD Finisher' 0x000a8b/0x0000001e
719 3 Andreas Steffen
</pre>
720 3 Andreas Steffen
721 3 Andreas Steffen
<pre>
722 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD Interface' 0x000a8b/0x00000028
723 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
724 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 64 bytes @ 0x7b3f30
725 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 7D 20 74 EA 00 00 55 97 00 00 00 21  ....} t...U....!
726 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
727 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 24 00 00 0A 8B 00 00 00 3C  .......$.......<
728 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 50 00 00 0A 8B 00 00 00 64  .......P.......d
729 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0x7d2074ea
730 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
731 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
732 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
733 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
734 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
735 3 Andreas Steffen
</pre>
736 3 Andreas Steffen
737 3 Andreas Steffen
<pre>
738 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD Interface' 0x000a8b/0x00000028
739 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
740 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
741 3 Andreas Steffen
</pre>
742 3 Andreas Steffen
743 3 Andreas Steffen
<pre>
744 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- resident-app-if ---
745 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationName: Resident App Interface+
746 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationPatches: service patch 2015-02-09
747 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationStringVersion: 2.5
748 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD ResidentApplicationVersion: 00:00:00:02:00:00:00:05:00:00:00:00:00:00:00:00
749 3 Andreas Steffen
</pre>
750 3 Andreas Steffen
751 3 Andreas Steffen
<pre>
752 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0x7d45c764
753 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
754 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationName' 0x000a8b/0x00000050
755 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationPatches' 0x000a8b/0x00000051
756 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationStringVersion' 0x000a8b/0x00000052
757 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD ResidentApplicationVersion' 0x000a8b/0x00000053
758 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 142 bytes @ 0x7b7960
759 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 7D 45 C7 64 00 00 55 97 00 00 00 22  ....}E.d..U...."
760 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6 00 00 0A 8B  ..........?.....
761 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 50 00 00 00 23 52 65 73 69 64 65 6E 74  ...P...#Resident
762 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 20 41 70 70 20 49 6E 74 65 72 66 61 63 65 2B 00   App Interface+.
763 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   64: 00 0A 8B 00 00 00 51 00 00 00 24 73 65 72 76 69  ......Q...$servi
764 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   80: 63 65 20 70 61 74 63 68 20 32 30 31 35 2D 30 32  ce patch 2015-02
765 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   96: 2D 30 39 00 00 0A 8B 00 00 00 52 00 00 00 0F 32  -09.......R....2
766 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  112: 2E 35 00 00 0A 8B 00 00 00 53 00 00 00 1C 00 00  .5.......S......
767 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  128: 00 02 00 00 00 05 00 00 00 00 00 00 00 00        ..............
768 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD Interface' 0x000a8b/0x00000028
769 3 Andreas Steffen
</pre>
770 3 Andreas Steffen
771 3 Andreas Steffen
<pre>
772 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] handling PB-PA message type 'PWG/HCD Scanner' 0x000a8b/0x00000032
773 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 "HCD" received message for Connection ID 1 from IMV 1
774 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] => 64 bytes @ 0x7bccf0
775 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 B9 C7 45 3D 00 00 55 97 00 00 00 21  ......E=..U....!
776 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 FF A6 00 00 00 00  ................
777 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 01 00 00 00 24 00 00 0A 8B 00 00 00 3C  .......$.......<
778 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 00 00 0A 8B 00 00 00 50 00 00 0A 8B 00 00 00 64  .......P.......d
779 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC message with ID 0xb9c7453d
780 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
781 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] processing PA-TNC attribute type 'IETF/Attribute Request' 0x000000/0x00000001
782 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x0000003c 'PWG/HCD FirmwareName'
783 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000050 'PWG/HCD ResidentApplicationName'
784 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC]   0x000a8b/0x00000064 'PWG/HCD UserApplicationName'
785 3 Andreas Steffen
</pre>
786 3 Andreas Steffen
787 3 Andreas Steffen
<pre>
788 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] IMC 2 received a segmentation contract request from IMV 1 for PA message type 'PWG/HCD Scanner' 0x000a8b/0x00000032
789 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   maximum attribute size of 10000000 bytes with maximum segment size of 65446 bytes
790 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   lowered maximum segment size to 16294 bytes
791 3 Andreas Steffen
</pre>
792 3 Andreas Steffen
793 3 Andreas Steffen
<pre>
794 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- fw-scanner ---
795 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareName: Scanner Firmware
796 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwarePatches: security patch 2013-08-11
797 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] security patch 2015-5-30
798 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareStringVersion: 2.5.3
799 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD FirmwareVersion: 00:00:00:02:00:00:00:05:00:00:00:03:00:00:00:00
800 3 Andreas Steffen
</pre>
801 3 Andreas Steffen
802 3 Andreas Steffen
<pre>
803 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] --- user-app-scanner ---
804 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationName: EasyScan
805 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationPatches: 
806 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationStringVersion: 2.2.3.5.7
807 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   HCD UserApplicationVersion: 00:00:00:02:00:00:00:02:00:00:00:03:00:05:00:07
808 3 Andreas Steffen
</pre>
809 3 Andreas Steffen
810 3 Andreas Steffen
<pre>
811 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC message with ID 0x56f7464e
812 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
813 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareName' 0x000a8b/0x0000003c
814 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwarePatches' 0x000a8b/0x0000003d
815 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareStringVersion' 0x000a8b/0x0000003e
816 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD FirmwareVersion' 0x000a8b/0x0000003f
817 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationName' 0x000a8b/0x00000064
818 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationPatches' 0x000a8b/0x00000065
819 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationStringVersion' 0x000a8b/0x00000066
820 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PA-TNC attribute type 'PWG/HCD UserApplicationVersion' 0x000a8b/0x00000067
821 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC] created PA-TNC message: => 244 bytes @ 0x7bd5e0
822 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]    0: 01 00 00 00 56 F7 46 4E 00 00 55 97 00 00 00 22  ....V.FN..U...."
823 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   16: 00 00 00 14 00 98 96 80 00 00 3F A6 00 00 0A 8B  ..........?.....
824 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   32: 00 00 00 3C 00 00 00 1C 53 63 61 6E 6E 65 72 20  ...<....Scanner 
825 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   48: 46 69 72 6D 77 61 72 65 00 00 0A 8B 00 00 00 3D  Firmware.......=
826 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   64: 00 00 00 3E 73 65 63 75 72 69 74 79 20 70 61 74  ...>security pat
827 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   80: 63 68 20 32 30 31 33 2D 30 38 2D 31 31 0A 73 65  ch 2013-08-11.se
828 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]   96: 63 75 72 69 74 79 20 70 61 74 63 68 20 32 30 31  curity patch 201
829 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  112: 35 2D 35 2D 33 30 00 00 0A 8B 00 00 00 3E 00 00  5-5-30.......>..
830 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  128: 00 11 32 2E 35 2E 33 00 00 0A 8B 00 00 00 3F 00  ..2.5.3.......?.
831 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  144: 00 00 1C 00 00 00 02 00 00 00 05 00 00 00 03 00  ................
832 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  160: 00 00 00 00 00 0A 8B 00 00 00 64 00 00 00 14 45  ..........d....E
833 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  176: 61 73 79 53 63 61 6E 00 00 0A 8B 00 00 00 65 00  asyScan.......e.
834 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  192: 00 00 0C 00 00 0A 8B 00 00 00 66 00 00 00 15 32  ..........f....2
835 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  208: 2E 32 2E 33 2E 35 2E 37 00 00 0A 8B 00 00 00 67  .2.3.5.7.......g
836 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  224: 00 00 00 1C 00 00 00 02 00 00 00 02 00 00 00 03  ................
837 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IMC]  240: 00 05 00 07                                      ....
838 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-PA message type 'PWG/HCD Scanner' 0x000a8b/0x00000032
839 3 Andreas Steffen
</pre>
840 3 Andreas Steffen
841 3 Andreas Steffen
<pre>
842 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] TNC client is handling outbound connection
843 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] PB-TNC state transition from 'Client Working' to 'Server Working'
844 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] creating PB-TNC CDATA batch
845 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
846 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
847 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
848 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
849 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
850 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] adding IETF/PB-PA message
851 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[TNC] sending PB-TNC CDATA batch (1385 bytes) for Connection ID 1
852 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/PT]
853 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[ENC] generating IKE_AUTH request 9 [ EAP/RES/TTLS ]
854 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 09[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (1100 bytes)
855 3 Andreas Steffen
</pre>
856 3 Andreas Steffen
857 3 Andreas Steffen
<pre>
858 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 11[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (76 bytes)
859 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 11[ENC] parsed IKE_AUTH response 9 [ EAP/REQ/TTLS ]
860 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 11[ENC] generating IKE_AUTH request 10 [ EAP/RES/TTLS ]
861 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 11[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (508 bytes)
862 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (156 bytes)
863 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[ENC] parsed IKE_AUTH response 10 [ EAP/REQ/TTLS ]
864 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/PT]
865 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] received TNCCS batch (8 bytes)
866 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] TNC client is handling inbound connection
867 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] processing PB-TNC SDATA batch for Connection ID 1
868 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] PB-TNC state transition from 'Server Working' to 'Client Working'
869 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] TNC client is handling outbound connection
870 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] no client data to send, sending empty PB-TNC CDATA batch
871 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] PB-TNC state transition from 'Client Working' to 'Server Working'
872 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] creating PB-TNC CDATA batch
873 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[TNC] sending PB-TNC CDATA batch (8 bytes) for Connection ID 1
874 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/PT]
875 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[ENC] generating IKE_AUTH request 11 [ EAP/RES/TTLS ]
876 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 03[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (156 bytes)
877 3 Andreas Steffen
</pre>
878 3 Andreas Steffen
879 3 Andreas Steffen
<pre>
880 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (188 bytes)
881 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[ENC] parsed IKE_AUTH response 11 [ EAP/REQ/TTLS ]
882 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/PT]
883 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] received TNCCS batch (40 bytes)
884 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] TNC client is handling inbound connection
885 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] processing PB-TNC RESULT batch for Connection ID 1
886 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] PB-TNC state transition from 'Server Working' to 'Decided'
887 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] processing IETF/PB-Assessment-Result message (16 bytes)
888 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] processing IETF/PB-Access-Recommendation message (16 bytes)
889 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] PB-TNC assessment result is 'don't know'
890 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] PB-TNC access recommendation is 'Access Denied'
891 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IMC] IMC 1 "OS" changed state of Connection ID 1 to 'None'
892 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IMC] IMC 2 "HCD" changed state of Connection ID 1 to 'None'
893 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] TNC client is handling outbound connection
894 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] PB-TNC state transition from 'Decided' to 'End'
895 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] creating PB-TNC CLOSE batch
896 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[TNC] sending PB-TNC CLOSE batch (8 bytes) for Connection ID 1
897 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/PT]
898 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[ENC] generating IKE_AUTH request 12 [ EAP/RES/TTLS ]
899 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 12[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (156 bytes)
900 3 Andreas Steffen
</pre>
901 3 Andreas Steffen
902 3 Andreas Steffen
<pre>
903 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (140 bytes)
904 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[ENC] parsed IKE_AUTH response 12 [ EAP/REQ/TTLS ]
905 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[TLS] received TLS close notify
906 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[TLS] sending TLS close notify
907 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[ENC] generating IKE_AUTH request 13 [ EAP/RES/TTLS ]
908 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 13[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (140 bytes)
909 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[NET] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] (76 bytes)
910 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[ENC] parsed IKE_AUTH response 13 [ EAP/FAIL ]
911 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[IKE] received EAP_FAILURE, EAP authentication failed
912 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[ENC] generating INFORMATIONAL request 14 [ N(AUTH_FAILED) ]
913 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[NET] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] (76 bytes)
914 3 Andreas Steffen
</pre>
915 3 Andreas Steffen
916 3 Andreas Steffen
<pre>
917 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[TNC] TODO: setup PT-TLS connection to aaa.strongswan.org:271
918 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[IMC] IMC 1 "OS" deleted the state of Connection ID 1
919 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[IMC] IMC 2 "HCD" deleted the state of Connection ID 1
920 1 Andreas Steffen
Jul 25 16:12:41 carol charon: 14[TNC] removed TNCCS Connection ID 1
921 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[DMN] signal of type SIGINT received. Shutting down
922 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[IMC] IMC 2 "HCD" terminated
923 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[IMC] IMC 1 "OS" terminated
924 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[TNC] removed IETF attributes
925 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[TNC] removed ITA-HSR attributes
926 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[TNC] removed PWG attributes
927 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[TNC] removed TCG attributes
928 1 Andreas Steffen
Jul 25 16:13:25 carol charon: 00[LIB] libimcv terminated
929 1 Andreas Steffen
</pre>