Public bug reported: It appears that mobility code was broken in revision 5208. I came to this conclusion by testing version 5207, which works, and by testing version 5208, which did not work. The dangling SA appears as follows after a mobility update: root@bling:~/projects/hipl-bzr/hipl# ip xfrm state src 3ffe::20 dst 3ffe::10 proto esp spi 0x2f0088de reqid 0 mode beet replay-window 0 auth hmac(sha1) 0x944434abbdfd1140c7a0977a47753a2a1cda32f3 enc cbc(aes) 0xf3d5ac481cf1ab8f1e256b940c5b5b73 sel src 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128 dst 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 src 3ffe::10 dst 3ffe::20 proto esp spi 0x87e7792c reqid 0 mode beet replay-window 0 auth hmac(sha1) 0xfded500a1836e4f31ee6c5bba608369c31d93b03 enc cbc(aes) 0x86f5c84f3aea80517594f151e06b1188 sel src 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 dst 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128 src 3ffe::10 dst 3ffe::19 proto esp spi 0x87e7792c reqid 0 mode beet replay-window 0 auth hmac(sha1) 0xfded500a1836e4f31ee6c5bba608369c31d93b03 enc cbc(aes) 0x86f5c84f3aea80517594f151e06b1188 sel src 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 dst 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128 ** Affects: hipl Importance: Undecided Assignee: René Hummen (rene-hummen) Status: New ** Changed in: hipl Assignee: (unassigned) => René Hummen (rene-hummen) -- You received this bug notification because you are a member of HIPL core team, which is subscribed to HIPL. https://bugs.launchpad.net/bugs/699730 Title: mobility and dangling SA Status in Host Identity Protocol for Linux: New Bug description: It appears that mobility code was broken in revision 5208. I came to this conclusion by testing version 5207, which works, and by testing version 5208, which did not work. The dangling SA appears as follows after a mobility update: root@bling:~/projects/hipl-bzr/hipl# ip xfrm state src 3ffe::20 dst 3ffe::10 proto esp spi 0x2f0088de reqid 0 mode beet replay-window 0 auth hmac(sha1) 0x944434abbdfd1140c7a0977a47753a2a1cda32f3 enc cbc(aes) 0xf3d5ac481cf1ab8f1e256b940c5b5b73 sel src 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128 dst 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 src 3ffe::10 dst 3ffe::20 proto esp spi 0x87e7792c reqid 0 mode beet replay-window 0 auth hmac(sha1) 0xfded500a1836e4f31ee6c5bba608369c31d93b03 enc cbc(aes) 0x86f5c84f3aea80517594f151e06b1188 sel src 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 dst 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128 src 3ffe::10 dst 3ffe::19 proto esp spi 0x87e7792c reqid 0 mode beet replay-window 0 auth hmac(sha1) 0xfded500a1836e4f31ee6c5bba608369c31d93b03 enc cbc(aes) 0x86f5c84f3aea80517594f151e06b1188 sel src 2001:15:6b4:74ca:4be0:446d:52b6:a6c9/128 dst 2001:19:11ac:e3af:2367:11a4:1a36:36ec/128