Starting UML PATH/start.sh spawn PATH single Linux version XXXX On node 0 totalpages: 8192 Kernel command line: Calibrating delay loop... XXXX bogomips Dentry-cache hash table entries: NUMBERS Inode-cache hash table entries: NUMBERS Mount-cache hash table entries: NUMBERS Buffer-cache hash table entries: NUMBERS Page-cache hash table entries: NUMEBRS POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Starting kswapd VFS: Diskquotas version dquot_6.4.0 initialized devfs: VERSION Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options Q pty: 256 Unix98 ptys configured SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256). loop: loaded (max 8 devices) PPP generic driver version VERSION Universal TUN/TAP device driver VERSION NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 2048 bind 2048) IPv4 over IPv4 tunneling driver GRE over IPv4 tunneling driver NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. Mounted devfs on /dev INIT: version 2.78 booting Activating swap... Calculating module dependancies done. Loading modules: LIST Checking all file systems... Parallelizing fsck version 1.18 (11-Nov-1999) Setting kernel variables. Mounting local filesystems... /dev/shm on /tmp type tmpfs (rw) /dev/shm on /var/run type tmpfs (rw) devpts on /dev/pts type devpts (rw,mode=0622) none on /usr/share type hostfs (ro) Enabling packet forwarding: done. Configuring network interfaces: done. Cleaning: /tmp /var/lock /var/run. Initializing random number generator... done. Recovering nvi editor sessions... done. Give root password for maintenance (or type Control-D for normal startup): east:~# klogd -c 4 -x -f /tmp/klog.log east:~# TESTING=${TESTING:-/testing} east:~# PATH=${TESTING}/pluto/bin:$PATH export PATH east:~# TESTNAME=ike-algo-01 east:~# export PLUTO="ipsec pluto" east:~# export WHACK="ipsec whack" east:~# ${TESTING}/pluto/bin/ifconfigs up east:~# . CONFIG east:~# cd /tmp east:/tmp# mkdir -p $TESTNAME east:/tmp# cd $TESTNAME east:/tmp/ike-algo-01# export HELPERS="--nhelpers 0 " east:/tmp/ike-algo-01# mkdir -p log.ref east:/tmp/ike-algo-01# mkdir -p log east:/tmp/ike-algo-01# LD=log east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-east.txt log.ref/pr-log east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-west.txt log.ref/pi-log east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/$TESTNAME/isakmp-aggr-psk-whack.txt log.ref/wi-log east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/ipsec.secrets . east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/ipsec.d/west . east:/tmp/ike-algo-01# ln -s ${TESTING}/pluto/ipsec.d/east . east:/tmp/ike-algo-01# ulimit -c unlimited east:/tmp/ike-algo-01# $DOPLUTO west >$LD/pi-log 2>&1 east:/tmp/ike-algo-01# me --name ike-algo-01 --psk --ike 3des-md5 $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-01 --psk --ike 3des-md5 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-01" east:/tmp/ike-algo-01# me --name ike-algo-02 --psk --ike 3des-sha1 $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-02 --psk --ike 3des-sha1 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-02" east:/tmp/ike-algo-01# me --name ike-algo-03 --psk --ike 3des-sha $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-03 --psk --ike 3des-sha --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-03" east:/tmp/ike-algo-01# me --name ike-algo-04 --psk --ike aes-md5 $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-04 --psk --ike aes-md5 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-04" east:/tmp/ike-algo-01# me --name ike-algo-05 --psk --ike aes-sha1 $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-05 --psk --ike aes-sha1 --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-05" east:/tmp/ike-algo-01# me --name ike-algo-06 --psk --ike aes-sha $EASTHOST $TO $WESTHOST $TIMES2 ; whackwest --name ike-algo-06 --psk --ike aes-sha --host 127.95.7.2 --ikeport 8500 --updown silly --to --updown sally --host 127.95.7.1 --ikeport 8500 --rekeymargin 350 --ikelifetime 900 --ipseclifetime 800 --keyingtries 2 002 added connection description "ike-algo-06" east:/tmp/ike-algo-01# me --status whackwest --status 000 %myid = (none) 000 debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore+pfkey+nattraversal+x509+private 000 000 000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128 000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192 000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20 000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16 000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024 000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536 000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048 000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072 000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096 000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144 000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192 000 000 stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0} 000 000 "ike-algo-01": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-01": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-01": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-01": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-01": IKE algorithms wanted: 5_000-1-5, 5_000-1-2, flags=-strict 000 "ike-algo-01": IKE algorithms found: 5_192-1_128-5, 5_192-1_128-2, 000 "ike-algo-02": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-02": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-02": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-02": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-02": IKE algorithms wanted: 5_000-2-5, 5_000-2-2, flags=-strict 000 "ike-algo-02": IKE algorithms found: 5_192-2_160-5, 5_192-2_160-2, 000 "ike-algo-03": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-03": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-03": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-03": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-03": IKE algorithms wanted: 5_000-2-5, 5_000-2-2, flags=-strict 000 "ike-algo-03": IKE algorithms found: 5_192-2_160-5, 5_192-2_160-2, 000 "ike-algo-04": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-04": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-04": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-04": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-04": IKE algorithms wanted: 7_000-1-5, 7_000-1-2, flags=-strict 000 "ike-algo-04": IKE algorithms found: 7_128-1_128-5, 7_128-1_128-2, 000 "ike-algo-05": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-05": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-05": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-05": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-05": IKE algorithms wanted: 7_000-2-5, 7_000-2-2, flags=-strict 000 "ike-algo-05": IKE algorithms found: 7_128-2_160-5, 7_128-2_160-2, 000 "ike-algo-06": 127.95.7.2:8500[S?C]...127.95.7.1:8500[S?C]; unrouted; eroute owner: #0 000 "ike-algo-06": ike_life: 900s; ipsec_life: 800s; rekey_margin: 350s; rekey_fuzz: 100%; keyingtries: 2 000 "ike-algo-06": policy: PSK; prio: 32,32; interface: ; 000 "ike-algo-06": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "ike-algo-06": IKE algorithms wanted: 7_000-2-5, 7_000-2-2, flags=-strict 000 "ike-algo-06": IKE algorithms found: 7_128-2_160-5, 7_128-2_160-2, 000 000 east:/tmp/ike-algo-01# $DOWHACK shutdown whackwest --shutdown 002 shutting down whackeast --shutdown whack: Pluto is not running (no "pluto/east/pluto.east.ctl") RC: 1 east:/tmp/ike-algo-01# if [ -f pluto/west/core ];