/testing/guestbin/swan-prep kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# cp policies/* /etc/ipsec.d/policies/ kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# echo "192.1.2.0/24" >> /etc/ipsec.d/policies/private-or-clear kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: /etc/init.d/ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Starting pluto IKE daemon for IPsec: kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# # ensure for tests acquires expire before our failureshunt=2m kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# echo 30 > /proc/sys/net/core/xfrm_acq_expires kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# # give OE policies time to load kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# ip -s xfrm monitor > /tmp/xfrm-monitor.out & [1] 10966 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# # ping causes acquire kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# ping -n -c 1 -I 192.1.3.209 192.1.2.123 PING 192.1.2.123 (192.1.2.123) from 192.1.3.209 : 56(84) bytes of data. --- 192.1.2.123 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms [1]+ Terminated ip -s xfrm monitor > /tmp/xfrm-monitor.out kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -n -c 1 -I 192.1.3.209 192.1.2.123' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '# wait on OE retransmits and rekeying, and delete that causes shunt install' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --shuntstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh '# send a forwarded packet to east so its reply will cause east's kernel to ACQUIRE' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh '# this sends more than one packet so east likely already can reply in the clear' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'echo "PLAINTEXT" | nc -s 192.1.3.209 192.1.2.123 22' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '# time for IKE from east to fail' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'echo "PLAINTEXT" | nc -s 192.1.3.209 192.1.2.123 22' <<<<<<<<< /dev/null 2> /dev/null kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# cp /tmp/xfrm-monitor.out OUTPUT/road.xfrm-monitor.txt kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# echo done done kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# # No tunnels should have established but a shunt should exist kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat]# ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/newoe-23-reverse-nat\[root@road newoe-23-reverse-nat 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --shuntstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<