--- north.console.txt	1970-01-01 00:00:00.000000000 +0000
+++ OUTPUT/north.console.txt	2019-08-26 13:26:47.147558684 +0000
@@ -0,0 +1,123 @@
+/testing/guestbin/swan-prep --x509
+Preparing X.509 files
+north #
+ # ensure that clear text does not get through
+north #
+ iptables -A INPUT -i eth1 -s 192.0.2.254/32 -j LOGDROP
+north #
+ iptables -I INPUT -m policy --dir in --pol ipsec -j ACCEPT
+north #
+ # confirm clear text does not get through
+north #
+ ping -c 4 -n -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+--- 192.0.2.254 ping statistics ---
+4 packets transmitted, 0 received, 100% packet loss, time XXXX
+north #
+ ipsec start
+Redirecting to: [initsystem]
+north #
+ /testing/pluto/bin/wait-until-pluto-started
+north #
+ ipsec auto --add northnet-eastnet-nat
+002 added connection description "northnet-eastnet-nat"
+north #
+ echo "initdone"
+initdone
+north #
+ ipsec auto --up northnet-eastnet-nat
+002 "northnet-eastnet-nat" #1: initiating Main Mode
+1v1 "northnet-eastnet-nat" #1: STATE_MAIN_I1: initiate
+1v1 "northnet-eastnet-nat" #1: STATE_MAIN_I2: sent MI2, expecting MR2
+002 "northnet-eastnet-nat" #1: I am sending my cert
+002 "northnet-eastnet-nat" #1: I am sending a certificate request
+1v1 "northnet-eastnet-nat" #1: STATE_MAIN_I3: sent MI3, expecting MR3
+002 "northnet-eastnet-nat" #1: Peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org'
+002 "northnet-eastnet-nat" #1: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA
+003 "northnet-eastnet-nat" #1: Authenticated using RSA
+004 "northnet-eastnet-nat" #1: STATE_MAIN_I4: ISAKMP SA established {auth=RSA_SIG cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048}
+002 "northnet-eastnet-nat" #2: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
+1v1 "northnet-eastnet-nat" #2: STATE_QUICK_I1: initiate
+004 "northnet-eastnet-nat" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP/NAT=>0xESPESP <0xESPESP xfrm=AES_CBC_128-HMAC_SHA1_96 NATOA=none NATD=192.1.2.23:4500 DPD=passive}
+north #
+ ping -n -c 3 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+64 bytes from 192.0.2.254: icmp_seq=2 ttl=64 time=0.XXX ms
+64 bytes from 192.0.2.254: icmp_seq=3 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+3 packets transmitted, 3 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ sleep 5
+north #
+ ping -n -c 1 -I 192.0.3.254 192.0.2.254
+PING 192.0.2.254 (192.0.2.254) from 192.0.3.254 : 56(84) bytes of data.
+64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.XXX ms
+--- 192.0.2.254 ping statistics ---
+1 packets transmitted, 1 received, 0% packet loss, time XXXX
+rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+north #
+ # should not see any hits
+north #
+ grep R_U_THERE_ACK /tmp/pluto.log
+|    Notify Message Type: R_U_THERE_ACK (0x8d29)
+|    Notify Message Type: R_U_THERE_ACK (0x8d29)
+|    Notify Message Type: R_U_THERE_ACK (0x8d29)
+north #
+ echo done
+done
+north #
+north #
+ grep 'Result using RFC 3947' /tmp/pluto.log
+| NAT-Traversal: Result using RFC 3947 (NAT-Traversal) sender port 500: I am behind NAT
+north #
+ ../bin/check-for-core.sh
+north #
+ if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
+