/testing/guestbin/swan-prep --hostkeys
Creating NSS database containing host keys
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec whack --impair replay_inbound
IMPAIR: recording all inbound messages
IMPAIR: replay all inbound messages old-to-new: no -> yes
east #
 ipsec auto --add westnet-eastnet
"westnet-eastnet": added oriented IKEv2 connection
east #
 echo "initdone"
initdone
east #
 ipsec _kernel state
east #
 ipsec _kernel policy
east #
 sed -n -e '/IMPAIR: .*: start processing inbound replay forward/,/IMPAIR: .*: stop processing inbound replay forward/ { /^[^|]/ p }' /tmp/pluto.log | grep -v 'message arrived'
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 1
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) message
"westnet-eastnet" #1: processing IKE_SA_INIT request from 192.1.2.45:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"westnet-eastnet" #1: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;KE=ECP_256;KE=ECP_384;KE=ECP_521;KE=CURVE25519;KE=MODP4096;KE=MODP3072;KE=MODP2048;KE=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;KE=ECP_256;KE=ECP_384;KE=ECP_521;KE=CURVE25519;KE=MODP4096;KE=MODP3072;KE=MODP2048;KE=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;KE=ECP_256;KE=ECP_384;KE=ECP_521;KE=CURVE25519;KE=MODP4096;KE=MODP3072;KE=MODP2048;KE=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;KE=ECP_256;KE=ECP_384;KE=ECP_521;KE=CURVE25519;KE=MODP4096;KE=MODP3072;KE=MODP2048;KE=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;KE=ECP_256;KE=ECP_384;KE=ECP_521;KE=CURVE25519;KE=MODP4096;KE=MODP3072;KE=MODP2048;KE=MODP8192
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 1
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 1
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) message
"westnet-eastnet" #1: received duplicate IKE_SA_INIT request; retransmitting response
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 1
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 2
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
"westnet-eastnet" #1: received first encrypted IKE_AUTH message containing SKF fragment 1 of 2 from 192.1.2.45:UDP/500, completing Key Exchange computation (SKEYSEED) in the background
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 2
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 1
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) message
"westnet-eastnet" #1: received duplicate IKE_SA_INIT request; retransmitting response
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 1
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 2
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
"westnet-eastnet" #1: dropping fragment 1 of 2 as repeat
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 2
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 3
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 3
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 1
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) message
"westnet-eastnet" #1: received old IKE_SA_INIT request; packet dropped
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 1
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 2
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
"westnet-eastnet" #1: IKE_AUTH request fragment 1 of 2 has duplicate Message ID 1; retransmitting response
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 2
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 3
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 3
IMPAIR: packet from 192.1.2.45:500: start processing inbound replay forward packet 4
IMPAIR: "westnet-eastnet" #1: processing a fake (cloned) request
"westnet-eastnet" #2: ESP traffic information: in=84B out=84B
"westnet-eastnet" #1: deleting IKE SA (established IKE SA)
IMPAIR: packet from 192.1.2.45:500: stop processing inbound replay forward packet 4
east #
