isakmpd hogging cpu

[Nino Margetic <nino@cng.fr>]

Dear all,

We have seen some strange isakmpd behaviour on OpenBSD 3.4-stable.

Scenario is the following: on an OpenBSD VPN "client" connecting to an
OpenBSD VPN "server" we are using dynamic IP addresses (ADSL client).
After sending 'teardown' and 'reconnect' messages to isakmpd.fifo via a
shell script (executed from ppp.linkdown and ppp.linkup) we see a
_significant_ increase in CPU utilization by the isakmpd daemon on the
client side (i.e. the machine on which 't' and 'c' messages have been
sent). This behaviour has also been reproduced on a fixed-IP VPN client.

Has anyone else seen this behaviour?
Thanks,

--Nino