206 lines
11 KiB
Plaintext
206 lines
11 KiB
Plaintext
=== Home Router Backup 2026-07-08 10:00:49 UTC ===
|
|
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
|
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
|
scp: itpp-backup-2026-07-08.rsc: No such file or directory
|
|
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
|
no such item (/file/remove; line 1)
|
|
|
|
The user-provided path /tmp/home-router-backup/itpp-backup-2026-07-08.rsc does not exist.
|
|
FAILED: S3 upload error
|
|
=== Home Router Backup 2026-07-08 23:32:56 UTC ===
|
|
╔══════════════════════════════════════════╗
|
|
║ WISP Backup — 2026-07-08
|
|
╚══════════════════════════════════════════╝
|
|
|
|
[*] Step 1: Connecting VPN ...
|
|
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
|
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
|
[-] VPN connection failed (ppp0 not up).
|
|
Cleaning up IPsec to avoid orphaned tunnel ...
|
|
Check logs: journalctl -u xl2tpd -n 20
|
|
ipsec status
|
|
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 61: /etc/xl2tpd/xl2tpd.conf: No such file or directory
|
|
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 80: /etc/ppp/options.wisp-vpn: No such file or directory
|
|
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 103: /etc/ppp/chap-secrets: No such file or directory
|
|
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 124: /var/run/xl2tpd/l2tp-control: No such file or directory
|
|
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 178: /var/run/xl2tpd/l2tp-control: No such file or directory
|
|
[-] VPN connection failed. Aborting.
|
|
=== Exit code: 1 ===
|
|
=== Home Router Backup 2026-07-08 23:34:04 UTC ===
|
|
Exception (client): Error reading SSH protocol banner
|
|
Traceback (most recent call last):
|
|
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2213, in _check_banner
|
|
buf = self.packetizer.readline(timeout)
|
|
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 395, in readline
|
|
buf += self._read_timeout(timeout)
|
|
~~~~~~~~~~~~~~~~~~^^^^^^^^^
|
|
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 665, in _read_timeout
|
|
raise EOFError()
|
|
EOFError
|
|
|
|
During handling of the above exception, another exception occurred:
|
|
|
|
Traceback (most recent call last):
|
|
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2029, in run
|
|
self._check_banner()
|
|
~~~~~~~~~~~~~~~~~~^^
|
|
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2217, in _check_banner
|
|
raise SSHException(
|
|
"Error reading SSH protocol banner" + str(e)
|
|
)
|
|
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner
|
|
|
|
╔══════════════════════════════════════════╗
|
|
║ WISP Backup — 2026-07-08
|
|
╚══════════════════════════════════════════╝
|
|
|
|
[*] Step 1: Connecting VPN ...
|
|
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
|
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
|
initiating Main Mode IKE_SA wisp-vpn[1] to 76.195.7.60
|
|
generating ID_PROT request 0 [ SA V V V V V ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes)
|
|
parsed ID_PROT response 0 [ SA V V V V ]
|
|
received NAT-T (RFC 3947) vendor ID
|
|
received XAuth vendor ID
|
|
received DPD vendor ID
|
|
received FRAGMENTATION vendor ID
|
|
selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
|
|
generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes)
|
|
parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
|
|
generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (92 bytes)
|
|
invalid HASH_V1 payload length, decryption failed?
|
|
could not decrypt payloads
|
|
message parsing failed
|
|
ignore malformed INFORMATIONAL request
|
|
INFORMATIONAL_V1 request with message ID 966687587 processing failed
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes)
|
|
parsed ID_PROT response 0 [ ID HASH ]
|
|
IKE_SA wisp-vpn[1] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
|
scheduling reauthentication in 85352s
|
|
maximum IKE_SA lifetime 85892s
|
|
generating QUICK_MODE request 3071489454 [ HASH SA No KE ID ID ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes)
|
|
parsed QUICK_MODE response 3071489454 [ HASH SA No KE ID ID ]
|
|
selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ
|
|
CHILD_SA wisp-vpn{1} established with SPIs c8225420_i 0739aab7_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
|
connection 'wisp-vpn' established successfully
|
|
[+] VPN connected! Interface: ppp0, IP: 192.168.88.104
|
|
[*] Adding route to VPN peer's subnet via ppp0 ...
|
|
[route] Added 192.168.88.0/24 via ppp0
|
|
[*] Adding static routes for tower subnets ...
|
|
(no routes configured in config.yaml)
|
|
[*] Checking internet connectivity ...
|
|
[+] Internet reachable — VPN is safe
|
|
[*] Verifying internet connectivity ...
|
|
[+] Internet OK — proceeding with backup
|
|
|
|
[*] Step 2: Backing up towers ...
|
|
|
|
[home-gateway] (192.168.88.1) — backing up ...
|
|
[FAIL] SSH connection failed: Error reading SSH protocol banner
|
|
|
|
[*] Step 3: Disconnecting VPN ...
|
|
[*] Tearing down VPN ...
|
|
closing CHILD_SA wisp-vpn{1} with SPIs c8225420_i (1028 bytes) 0739aab7_o (1045 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
|
sending DELETE for ESP CHILD_SA with SPI c8225420
|
|
generating INFORMATIONAL_V1 request 1674779512 [ HASH D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes)
|
|
deleting IKE_SA wisp-vpn[1] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
|
sending DELETE for IKE_SA wisp-vpn[1]
|
|
generating INFORMATIONAL_V1 request 3552681913 [ HASH D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes)
|
|
IKE_SA [1] closed successfully
|
|
[+] VPN disconnected
|
|
|
|
[*] Step 4: Cleaning up local temp files ...
|
|
|
|
╔══════════════════════════════════════════╗
|
|
║ Summary: 0 OK, 1 Failed
|
|
╚══════════════════════════════════════════╝
|
|
✗ home-gateway (home) — SSH connection failed: Error reading SSH protocol banner
|
|
=== Exit code: 1 ===
|
|
=== Home Router Backup 2026-07-08 23:34:58 UTC ===
|
|
╔══════════════════════════════════════════╗
|
|
║ WISP Backup — 2026-07-08
|
|
╚══════════════════════════════════════════╝
|
|
|
|
[*] Step 1: Connecting VPN ...
|
|
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
|
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
|
initiating Main Mode IKE_SA wisp-vpn[2] to 76.195.7.60
|
|
generating ID_PROT request 0 [ SA V V V V V ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes)
|
|
parsed ID_PROT response 0 [ SA V V V V ]
|
|
received NAT-T (RFC 3947) vendor ID
|
|
received XAuth vendor ID
|
|
received DPD vendor ID
|
|
received FRAGMENTATION vendor ID
|
|
selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
|
|
generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes)
|
|
parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
|
|
generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes)
|
|
parsed ID_PROT response 0 [ ID HASH ]
|
|
IKE_SA wisp-vpn[2] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
|
scheduling reauthentication in 85828s
|
|
maximum IKE_SA lifetime 86368s
|
|
generating QUICK_MODE request 1842263490 [ HASH SA No KE ID ID ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes)
|
|
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes)
|
|
parsed QUICK_MODE response 1842263490 [ HASH SA No KE ID ID ]
|
|
selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ
|
|
CHILD_SA wisp-vpn{2} established with SPIs c3a88a35_i 0030d7ca_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
|
generating QUICK_MODE request 1842263490 [ HASH ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (60 bytes)
|
|
connection 'wisp-vpn' established successfully
|
|
[+] VPN connected! Interface: ppp0, IP: 192.168.88.104
|
|
[*] Adding route to VPN peer's subnet via ppp0 ...
|
|
[route] Added 192.168.88.0/24 via ppp0
|
|
[*] Adding static routes for tower subnets ...
|
|
(no routes configured in config.yaml)
|
|
[*] Checking internet connectivity ...
|
|
[+] Internet reachable — VPN is safe
|
|
[*] Verifying internet connectivity ...
|
|
[+] Internet OK — proceeding with backup
|
|
|
|
[*] Step 2: Backing up towers ...
|
|
|
|
[home-gateway] (10.77.0.2) — backing up ...
|
|
Fetching config ...
|
|
[s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/configs/home/2026-07-08/home-gateway-2026-07-08.rsc.gz
|
|
Fetching last 500 log lines ...
|
|
[warn] Command exited 1:
|
|
[s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/logs/home/2026-07-08/home-gateway-2026-07-08.log.gz
|
|
|
|
[*] Step 3: Disconnecting VPN ...
|
|
[*] Tearing down VPN ...
|
|
closing CHILD_SA wisp-vpn{2} with SPIs c3a88a35_i (848 bytes) 0030d7ca_o (829 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
|
sending DELETE for ESP CHILD_SA with SPI c3a88a35
|
|
generating INFORMATIONAL_V1 request 2340666817 [ HASH D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes)
|
|
deleting IKE_SA wisp-vpn[2] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
|
sending DELETE for IKE_SA wisp-vpn[2]
|
|
generating INFORMATIONAL_V1 request 257487867 [ HASH D ]
|
|
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes)
|
|
IKE_SA [2] closed successfully
|
|
[+] VPN disconnected
|
|
|
|
[*] Step 4: Cleaning up local temp files ...
|
|
|
|
╔══════════════════════════════════════════╗
|
|
║ Summary: 1 OK, 0 Failed
|
|
╚══════════════════════════════════════════╝
|
|
✓ home-gateway (home) — config ✓ logs ✓
|
|
=== Exit code: 0 ===
|