/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.2.23/32 dst 192.1.3.209/32 \	dir out priority 2088927 ptype main \	tmpl src 192.1.2.23 dst 192.1.3.209\		proto esp reqid 16433 mode tunnel\
src 192.1.3.209/32 dst 192.1.2.23/32 \	dir fwd priority 2088927 ptype main \	tmpl src 192.1.3.209 dst 192.1.2.23\		proto esp reqid 16433 mode tunnel\
src 192.1.3.209/32 dst 192.1.2.23/32 \	dir in priority 2088927 ptype main \	tmpl src 192.1.3.209 dst 192.1.2.23\		proto esp reqid 16433 mode tunnel\
src 192.1.2.23/32 dst 192.1.2.0/24 \	dir out priority 2088935 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.23/32 dst 192.1.3.0/24 \	dir out priority 2088935 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
src 192.1.2.254/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.254/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.2.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
east Mon Aug 26 13:19:05 UTC 2019
XFRM state:
src 192.1.3.209 dst 192.1.2.23
	proto esp spi 0x869690e4 reqid 16433 mode tunnel
	replay-window 32 flag af-unspec
	aead rfc4106(gcm(aes)) 0x9225136b5d4bc29ddf2894b88cd840339cc0c5cd95965bdbdee2374e2cc10191524c81b3 128
	anti-replay context: seq 0x7, oseq 0x0, bitmap 0x0000007f
src 192.1.2.23 dst 192.1.3.209
	proto esp spi 0x194ea8da reqid 16433 mode tunnel
	replay-window 32 flag af-unspec
	aead rfc4106(gcm(aes)) 0x3ee2cab67c1d272179b0cc8a3a80d760b0ba34605f051f21238c9fdca26472af089dc781 128
	anti-replay context: seq 0x0, oseq 0x7, bitmap 0x00000000
XFRM policy:
src 192.1.2.23/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.2.254/32
	dir out priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.2.254/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.2.254/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.3.209/32
	dir out priority 2088927 ptype main
	tmpl src 192.1.2.23 dst 192.1.3.209
		proto esp reqid 16433 mode tunnel
src 192.1.3.209/32 dst 192.1.2.23/32
	dir fwd priority 2088927 ptype main
	tmpl src 192.1.3.209 dst 192.1.2.23
		proto esp reqid 16433 mode tunnel
src 192.1.3.209/32 dst 192.1.2.23/32
	dir in priority 2088927 ptype main
	tmpl src 192.1.3.209 dst 192.1.2.23
		proto esp reqid 16433 mode tunnel
src 192.1.2.23/32 dst 192.1.2.0/24
	dir out priority 2088935 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
src 192.1.2.23/32 dst 192.1.3.0/24
	dir out priority 2088935 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 via 192.1.2.45 dev eth1
192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825542.369:204671): avc:  denied  { write } for  pid=27101 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63454895 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-10-expire-inactive-ike\[root@east newoe-10-expire-inactive-ike]#