IKE HANDSHAKE

This is a discussion on IKE HANDSHAKE within the Linux Security forums, part of the System Security and Security Related category; I'd like to have some explanations about the handshake times. I used racoon to establish an IPsec SA between ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 11-25-2004
Giobbe
 
Posts: n/a
Default IKE HANDSHAKE

I'd like to have some explanations about the handshake times. I used
racoon to establish an IPsec SA between two computers on my LAN. The LAN
latency time is about 0.110 ms and I measured the sending and receiving
of packets with Ethereal. I did the test many times, always getting
approximately the same values:

Time Source Dest
0.00000 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
0.000919 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
0.063076 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
0.011600 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
0.038176 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
0.000239 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
0.000174 10.0.0.8 10.0.0.12 Informal
0.009175 10.0.0.12 10.0.0.8 Informal
1.100225 10.0.0.12 10.0.0.8 Quick Mode
0.012896 10.0.0.8 10.0.0.12 Quick Mode
0.006931 10.0.0.12 10.0.0.8 Quick Mode

I always get a really high time value in the first message of quick mode
exchange!!! It's 1 second!!! It's really a lot!!! I cannot figure out
why!!! Can someone help me? The network latency time is low, it means
that these time values are due to computation on the peers... which
operation requires so much time? The first and second message should
require the same computation on both peers as the operations are the
same (in my case ESP tunnel mode negotiation, but the result doesn't
change if I try ESP transport mode).

Thanks,
Giuseppe
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 12:04 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0