Le samedi 3 Juillet 2004 13:02, Paul Wouters a écrit :
(...)

> 2.6.5 
> 
> He seems to have generic memory problems though, so I don't think this is an 
> openswan or kernel ipsec bug.
No it doesn't seem to be an openswan or kernel ipsec bug. 

Did you all read my mail from this night (0254 am) ?
i explained there that It seems that openswan suffers under poor memory conditions whereas when there is plenty of memory everything works 
fine.
I confirm that under these poor memory conditions, using compress=yes limits the return packets ( SFS -> OS2) to 348 bytes whereas with compress=no there is no such limitation
(but faled memory allocations in this case but not always).
> 
> Paul

Please find in attachment the slabinfo with compress and the slabinfo without compress tag in ipsec.conf.


Rgds,

db