ipsec whack --trafficstatus
ip -s link show ipsec1
ip rule show
ip route show table 50
../../guestbin/ipsec-kernel-state.sh
../../guestbin/ipsec-kernel-policy.sh
: ==== cut ====
# this is global will be noisy and change based on host.
ip addr show
: ==== tuc ====
