Tobias Brunner
1fde30cc23
Additionally, send a regular (small) ping as the kernel does not compress small packets and handles those differently inbound.
13 lines
848 B
Plaintext
13 lines
848 B
Plaintext
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*carol@strongswan.org.*moon.strongswan.org::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*ESTABLISHED.*moon.strongswan.org.*carol@strongswan.org::YES
|
|
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL.*IPCOMP::YES
|
|
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL.*IPCOMP::YES
|
|
moon:: cat /var/log/daemon.log::IKE_AUTH request.*N(IPCOMP_SUP)::YES
|
|
moon:: cat /var/log/daemon.log::IKE_AUTH response.*N(IPCOMP_SUP)::YES
|
|
moon:: ip xfrm state::proto comp spi::YES
|
|
carol::ip xfrm state::proto comp spi::YES
|
|
carol::ping -n -c 1 -s 8184 -p deadbeef PH_IP_ALICE::8192 bytes from PH_IP_ALICE::YES
|
|
carol::ping -n -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE::YES
|
|
moon::tcpdump::carol.strongswan.org > moon.strongswan.org: ESP::YES
|
|
moon::tcpdump::moon.strongswan.org > carol.strongswan.org: ESP::YES
|