IKE HANDSHAKE

Discussion in 'Linux Networking' started by Giobbe, Nov 25, 2004.

  1. Giobbe

    Giobbe Guest

    I'd like to have some explanations about the handshake times. I used
    racoon to establish an IPsec SA between two computers on my LAN. The LAN
    latency time is about 0.110 ms and I measured the sending and receiving
    of packets with Ethereal. I did the test many times, always getting
    approximately the same values:

    Time Source Dest
    0.00000 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
    0.000919 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
    0.063076 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
    0.011600 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
    0.038176 10.0.0.12 10.0.0.8 Identity Protection (Main Mode)
    0.000239 10.0.0.8 10.0.0.12 Identity Protection (Main Mode)
    0.000174 10.0.0.8 10.0.0.12 Informal
    0.009175 10.0.0.12 10.0.0.8 Informal
    1.100225 10.0.0.12 10.0.0.8 Quick Mode
    0.012896 10.0.0.8 10.0.0.12 Quick Mode
    0.006931 10.0.0.12 10.0.0.8 Quick Mode

    I always get a really high time value in the first message of quick mode
    exchange!!! It's 1 second!!! It's really a lot!!! I cannot figure out
    why!!! Can someone help me? The network latency time is low, it means
    that these time values are due to computation on the peers... which
    operation requires so much time? The first and second message should
    require the same computation on both peers as the operations are the
    same (in my case ESP tunnel mode negotiation, but the result doesn't
    change if I try ESP transport mode).

    Thanks,
    Giuseppe
     
    Giobbe, Nov 25, 2004
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.