/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# ipsec auto --add westnet-eastnet
002 added connection description "westnet-eastnet"
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 98-shutdown-east-west.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# ipsec stop
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec stop
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Shutting down pluto IKE daemon
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
..........
Attempt to shut Pluto down failed!  Trying kill
/etc/init.d/ipsec: line 162: kill: p: invalid signal specification
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 98-shutdown-east-west.sh 'ipsec stop' <<<<<<<<<<tuc<<<<<<<<<<: what should be looked for?
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# sed -n -f payloads.sed /tmp/pluto.log
-- start message (ID)
|    next payload type: ISAKMP_NEXT_ID (0x5)
| ***parse ISAKMP Signature Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 278 (0x116)
"westnet-eastnet" #1: Authenticated using RSA

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| ***parse ISAKMP Hash Payload:
|    next payload type: ISAKMP_NEXT_SA (0x1)
|    length: 36 (0x24)
| received 'quick_inI1_outR1' message HASH(1) data ok

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| ***parse ISAKMP Hash Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 36 (0x24)
| received 'quick_inI2' message HASH(3) data ok

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| ***parse ISAKMP Hash Payload:
|    next payload type: ISAKMP_NEXT_D (0xc)
|    length: 36 (0x24)
| ***parse ISAKMP Delete Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 16 (0x10)
|    DOI: ISAKMP_DOI_IPSEC (0x1)
|    protocol ID: 3 (0x3)
|    SPI size: 4 (0x4)
|    number of SPIs: 1 (0x1)
| received 'informational' message HASH(1) data ok

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| Informational Exchange is for an unknown (expired?) SA with MSGID:0x....

-- start message (ID)
|    next payload type: ISAKMP_NEXT_ID (0x5)
| ***parse ISAKMP Signature Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 278 (0x116)
"westnet-eastnet" #3: Authenticated using RSA

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| ***parse ISAKMP Hash Payload:
|    next payload type: ISAKMP_NEXT_D (0xc)
|    length: 36 (0x24)
| ***parse ISAKMP Delete Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 28 (0x1c)
|    DOI: ISAKMP_DOI_IPSEC (0x1)
|    protocol ID: 1 (0x1)
|    SPI size: 16 (0x10)
|    number of SPIs: 1 (0x1)
| received 'informational' message HASH(1) data ok

-- start message (ID)
|    next payload type: ISAKMP_NEXT_ID (0x5)
| ***parse ISAKMP Signature Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    length: 278 (0x116)
"westnet-eastnet" #4: Authenticated using RSA

-- start message (HASH)
|    next payload type: ISAKMP_NEXT_HASH (0x8)
| ***parse ISAKMP Hash Payload:
|    next payload type: ISAKMP_NEXT_SA (0x1)
|    length: 4 (0x4)
"westnet-eastnet" #4: received 'quick_inI1_outR1' message HASH(1) data is the wrong length (received 0 bytes but expected 32)

kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/impair-09-protected-ikev1\[root@east impair-09-protected-ikev1]#