/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
 iptables -I INPUT -p udp -m length --length 0x5dc:0xffff -j DROP
east #
 ipsec start
Redirecting to: [initsystem]
east #
 /testing/pluto/bin/wait-until-pluto-started
east #
 ipsec auto --add x509
002 "x509": added IKEv1 connection
east #
 ipsec whack --impair suppress-retransmits
east #
 echo "initdone"
initdone
east #
 grep "fragment" /tmp/pluto.log | grep -v delref
| peer supports fragmentation
|    fragment id: 1 (00 01)
|    fragment number: 1 (01)
| received IKE fragment id '1', number '1'
|    fragment id: 1 (00 01)
|    fragment number: 2 (02)
| received IKE fragment id '1', number '2'
|    fragment id: 1 (00 01)
|    fragment number: 3 (03)
| received IKE fragment id '1', number '3'
|    fragment id: 1 (00 01)
|    fragment number: 4 (04)
| received IKE fragment id '1', number '4'
|    fragment id: 1 (00 01)
|    fragment number: 5 (05)
| received IKE fragment id '1', number '5'(last)
|  updated IKE fragment state to respond using fragments without waiting for re-transmits
|    fragment id: 1 (00 01)
|    fragment number: 1 (01)
| received IKE fragment id '1', number '1'
|    fragment id: 1 (00 01)
|    fragment number: 2 (02)
| received IKE fragment id '1', number '2'
|    fragment id: 1 (00 01)
|    fragment number: 3 (03)
| received IKE fragment id '1', number '3'
|    fragment id: 1 (00 01)
|    fragment number: 4 (04)
| received IKE fragment id '1', number '4'
|    fragment id: 1 (00 01)
|    fragment number: 5 (05)
| received IKE fragment id '1', number '5'(last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
|  updated IKE fragment state to respond using fragments without waiting for re-transmits
east #
 ../bin/check-for-core.sh
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
east #
 
