Re: draft-ietf-ipsec-notifymsg-00.txt (long)

"Scott G. Kelly" <skelly@redcreek.com> Wed, 23 June 1999 18:25 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by mail.proper.com (8.8.8/8.8.5) with ESMTP id LAA18638; Wed, 23 Jun 1999 11:25:45 -0700 (PDT)
Received: by lists.tislabs.com (8.9.1/8.9.1) id MAA14299 Wed, 23 Jun 1999 12:11:47 -0400 (EDT)
Message-ID: <37710758.A591EF81@redcreek.com>
Date: Wed, 23 Jun 1999 09:12:08 -0700
From: "Scott G. Kelly" <skelly@redcreek.com>
Organization: RedCreek Communications
X-Mailer: Mozilla 4.5 [en] (Win95; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Sheila Frankel <sheila.frankel@nist.gov>
CC: ipsec@lists.tislabs.com
Subject: Re: draft-ietf-ipsec-notifymsg-00.txt (long)
References: <3.0.2.32.19990618121400.0069e810@csmes.ncsl.nist.gov> <3.0.2.32.19990623084115.006c310c@csmes.ncsl.nist.gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk

Sheila Frankel wrote:
> 
> Hi Scott,
> 
>         One minor clarification:
> 
> >> >2.30 UNEQUAL-PAYLOAD-LENGTHS
> >> >
> >> > The UNEQUAL-PAYLOAD-LENGTHS error message may be used to communicate
> >> > that message length in the ISAKMP header does not match the sum of
> >> > the actual payload lengths.
> >>
> >> This also applies in the case where the message length in the ISAKMP
> >> header
> >> does not match the length of the message that was actually received.
> >> It should
> >> probably also apply to other length-related anomalies.
> >>
> >
> >I don't understand the difference between the text and what you say
> >here. Please clarify.
> >
> 
> The 2 cases that I think this message should cover are:
> 1) The message length in the ISAKMP header accurately reflects the total
> size of the received packet, but the sum of the individual payload lengths
> (in the Generic Payload Headers) does not match the total message length.
> (This often happens when a packet does not decrypt properly - IV problems,
> etc.)
> 2) The message length in the ISAKMP header does not match the size of the
> received packet.
> 
> Sheila

I get it now - thanks.

Scott