/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: [initsystem]
west #
 /testing/pluto/bin/wait-until-pluto-started
west #
 ipsec auto --add multi
002 added IKEv2 connection "multi/1x1"
002 added IKEv2 connection "multi/1x2"
002 added IKEv2 connection "multi/1x3"
002 added IKEv2 connection "multi/1x4"
002 added IKEv2 connection "multi/2x1"
002 added IKEv2 connection "multi/2x2"
002 added IKEv2 connection "multi/2x3"
002 added IKEv2 connection "multi/2x4"
002 added IKEv2 connection "multi/3x1"
002 added IKEv2 connection "multi/3x2"
002 added IKEv2 connection "multi/3x3"
002 added IKEv2 connection "multi/3x4"
002 added IKEv2 connection "multi/4x1"
002 added IKEv2 connection "multi/4x2"
002 added IKEv2 connection "multi/4x3"
002 added IKEv2 connection "multi/4x4"
west #
 #ipsec whack --impair suppress-retransmits
west #
 echo "initdone"
initdone
west #
 # probably best to attach pluto on east to gdb
west #
 ipsec auto --up multi
000 initiating all conns with alias='multi'
1v2 "multi/4x4" #1: initiating IKEv2 connection
000 "multi/4x3": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/4x2": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/4x1": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/3x4": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/3x3": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/3x2": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/3x1": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/2x4": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/2x3": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/2x2": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/2x1": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/1x4": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/1x3": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/1x2": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
000 "multi/1x1": queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "multi/4x4"
1v2 "multi/4x4" #1: sent IKE_SA_INIT request
west #
 echo done
done
west #
 ../../pluto/bin/ipsec-look.sh
west NOW
XFRM state:
XFRM policy:
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 dev eth0 proto kernel scope link src 192.0.1.254
192.0.2.0/24 via 192.1.2.23 dev eth1
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.45
NSS_CERTIFICATES
Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI
west #
 ipsec stop
Redirecting to: [initsystem]
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
west #
 grep -e leak /tmp/pluto.log | grep -v -e '|'
leak-detective enabled
west #
 ../bin/check-for-core.sh
west #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
west #