/testing/guestbin/swan-prep --userland strongswan
east #
 strongswan starter --debug-all
Starting strongSwan X.X.X IPsec [starter]...
Loading config setup
Loading conn 'westnet-eastnet-ikev2'
  left=192.1.2.45
  leftid=@west
  right=192.1.2.23
  rightid=@east
  rightsubnet=192.0.2.0/24
  leftsubnet=192.0.1.0/24
  authby=secret
  keyexchange=ikev2
  auto=add
  ike=3des-sha1
  esp=aes128ccm16-modp1536
[ 00.00] NET: Registered protocol family 15
found netkey IPsec stack
east #
 echo "initdone"
initdone
east #
 if [ -f /var/run/pluto/pluto.pid ]; then ipsec look ; fi
east #
 if [ -f /var/run/charon.pid ]; then strongswan statusall ; fi
Status of IKE charon daemon (strongSwan VERSION):
  uptime: XXX seconds, since YYY
  malloc sbrk XXXXXX,mmap X, used XXXXXX, free XXXXX
  worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 3
  loaded plugins: charon curl aes des rc2 sha1 sha2 md4 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default farp stroke updown eap-identity eap-md5 eap-gtc eap-mschapv2 eap-tls eap-ttls eap-peap xauth-generic xauth-eap dhcp
Listening IP addresses:
  192.0.2.254
  192.1.2.23
  192.9.2.23
Connections:
westnet-eastnet-ikev2:  192.1.2.23...192.1.2.45  IKEv2
westnet-eastnet-ikev2:   local:  [east] uses pre-shared key authentication
westnet-eastnet-ikev2:   remote: [west] uses pre-shared key authentication
westnet-eastnet-ikev2:   child:  192.0.2.0/24 === 192.0.1.0/24 TUNNEL
Security Associations (1 up, 0 connecting):
westnet-eastnet-ikev2[1]: ESTABLISHED XXX seconds ago, 192.1.2.23[east]...192.1.2.45[west]
westnet-eastnet-ikev2[1]: IKEv2 SPIs: SPISPI_i SPISPI_r, pre-shared key reauthentication in 2 hours
westnet-eastnet-ikev2[1]: IKE proposal: 3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536
westnet-eastnet-ikev2{1}:  INSTALLED, TUNNEL, ESP SPIs: SPISPI_i SPISPI_o
westnet-eastnet-ikev2{1}:  AES_CCM_16_128, 336 bytes_i (4 pkts, 12s ago), 336 bytes_o (4 pkts, 12s ago), rekeying in 46 minutes
westnet-eastnet-ikev2{1}:   192.0.2.0/24 === 192.0.1.0/24 
east #
east #
 if [ -n "`ls /tmp/core* 2>/dev/null`" ]; then echo CORE FOUND; mv /tmp/core* ./; fi
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

