/testing/guestbin/swan-prep --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# certutil -D -n road -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# certutil -D -n east -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# cp road-ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# echo "192.1.2.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# restorecon -R /etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: namespaces direct start via ipsec pluto
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # ensure for tests acquires expire before our failureshunt=2m
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# echo 30 > /proc/sys/net/core/xfrm_acq_expires
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ip -s xfrm monitor > /tmp/xfrm-monitor.out &
[1] 2150
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # one packet, which gets eaten by XFRM, so east does not initiate
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ping -n -c 1 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.

--- 192.1.2.23 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

[1]+  Terminated              ip -s xfrm monitor > /tmp/xfrm-monitor.out
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -n -c 1 -I 192.1.3.209 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<# wait on OE IKE negotiation
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '# wait on OE IKE negotiation' <<<<<<<<<<tuc<<<<<<<<<<sleep 1
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ping -n -c 2 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.

--- 192.1.2.23 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 20ms

kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -n -c 2 -I 192.1.3.209 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<# should show established tunnel and no bare shunts
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '# should show established tunnel and no bare shunts' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --shuntstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --shuntstatus' <<<<<<<<<<tuc<<<<<<<<<<../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.3.209/32 dst 192.1.2.0/24 \	dir out priority 1564647 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
road Sat Sep 21 07:32:18 UTC 2019
XFRM state:
src 192.1.3.209 dst 192.1.2.23
	proto esp spi 0x00000000 reqid 0 mode transport
	replay-window 0 
	anti-replay context: seq 0x0, oseq 0x0, bitmap 0x00000000
	sel src 192.1.3.209/32 dst 192.1.2.23/32 proto icmp type 8 code 0 dev eth0 
XFRM policy:
src 192.1.2.253/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.2.0/24
	dir out priority 1564647 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.3.254 dev eth0
192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

Libreswan test CA for mainca - Libreswan                     CT,, 
east-ec                                                      P,,  
hashsha1                                                     P,,  
nic                                                          P,,  
north                                                        P,,  
west                                                         P,,  
west-ec                                                      P,,  
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec stop
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
/usr/bin/nsenter --mount=/run/mountns/road-certoe-08-nat-packet-cop-restart --net=/run/netns/road-certoe-08-nat-packet-cop-restart --uts=/run/utsns/road-certoe-08-nat-packet-cop-restart /bin/bash
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec stop' <<<<<<<<<<tuc<<<<<<<<<<conntrack -L -n | sed -e "s/id=[0-9]*/id=XXXX/g" -e "s/icmp     1 [0-9]*/icmp     1 XX/" | sort
conntrack v1.4.5 (conntrack-tools): 0 flow entries have been shown.
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# conntrack -F
conntrack v1.4.5 (conntrack-tools): connection tracking table has been emptied.
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: namespaces direct start via ipsec pluto
pluto: FATAL: lock file "/run/pluto/pluto.pid" already exists
| pluto_sd: executing action action: stopping(6), status 10
| certs and keys locked by 'free_preshared_secrets'
| certs and keys unlocked by 'free_preshared_secrets'
| crl fetch request list locked by 'free_crl_fetch'
| crl fetch request list unlocked by 'free_crl_fetch'
ABORT: ASSERTION FAILED: event_initialized(&se->ev) (in free_signal_handlers() at server.c:624)
Aborted (core dumped)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 134]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 134 roadrun.sh 'ipsec start' <<<<<<<<<<tuc<<<<<<<<<<sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # packet trigger OE
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ping -n -c 1 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.

--- 192.1.2.23 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -n -c 1 -I 192.1.3.209 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<sleep 1
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ping -n -c 2 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.

--- 192.1.2.23 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 54ms

kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -n -c 2 -I 192.1.3.209 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --shuntstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --shuntstatus' <<<<<<<<<<tuc<<<<<<<<<<../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.3.209/32 dst 192.1.2.0/24 \	dir out priority 1564647 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.209/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.209/32 \	dir in priority 1564639 ptype main \
src 192.1.3.209/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
road Sat Sep 21 07:32:47 UTC 2019
XFRM state:
XFRM policy:
src 192.1.2.253/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.209/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.209/32
	dir in priority 1564639 ptype main
src 192.1.3.209/32 dst 192.1.2.0/24
	dir out priority 1564647 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.3.254 dev eth0
192.1.3.0/24 dev eth0 proto kernel scope link src 192.1.3.209
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

Libreswan test CA for mainca - Libreswan                     CT,, 
east-ec                                                      P,,  
hashsha1                                                     P,,  
nic                                                          P,,  
north                                                        P,,  
west                                                         P,,  
west-ec                                                      P,,  
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# conntrack -L -n | sed -e "s/id=[0-9]*/id=XXXX/g" -e "s/icmp     1 [0-9]*/icmp     1 XX/" | sort
conntrack v1.4.5 (conntrack-tools): 0 flow entries have been shown.
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# killall ip > /dev/null 2> /dev/null
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'killall ip > /dev/null 2> /dev/null' <<<<<<<<<<tuc<<<<<<<<<<cp /tmp/xfrm-monitor.out OUTPUT/road.xfrm-monitor.txt
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # ping should succeed through tunnel
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# echo done
done
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# # A tunnel should have established with non-zero byte counters
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# you should see both RSA and NULL
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# you should see both RSA and NULL' <<<<<<<<<<tuc<<<<<<<<<<grep IKEv2_AUTH_ /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep IKEv2_AUTH_ /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<: ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-08-nat-packet-cop-restart\[root@road certoe-08-nat-packet-cop-restart]#