/testing/guestbin/swan-prep --nokeys
Creating empty NSS database
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add east
"east": added IKEv2 connection
east #
 ipsec whack --impair revival
east #
 ../../guestbin/tcpdump.sh --start -i eth1
tcpdump started
east #
 echo "initdone"
initdone
east #
 ../../guestbin/xfrmcheck.sh
east #
 # traffic should be 0 bytes in both directions - no ESP
east #
 ipsec whack --trafficstatus
#6: "east", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, maxBytes=2^63B, id='@road'
east #
 # EAST should not have ESP packets - no IKE over ESP
east #
 ../../guestbin/tcpdump.sh --stop -i eth1
reading from file /tmp/east.ikev2-xfrmi-16-rekey.eth1.tcpdump.pcap, link-type EN10MB (Ethernet)
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: parent_sa ikev2_init[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: parent_sa ikev2_init[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  ikev2_auth[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  child_sa[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  child_sa[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  inf2[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  inf2[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  child_sa[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  child_sa[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  inf2[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  inf2[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  inf2[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  inf2[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: parent_sa ikev2_init[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: parent_sa ikev2_init[R]
IP 192.1.3.209.isakmp > 192.1.2.23.isakmp: isakmp: child_sa  ikev2_auth[I]
IP 192.1.2.23.isakmp > 192.1.3.209.isakmp: isakmp: child_sa  ikev2_auth[R]
east #
 
