check migration of ESP sequence numbers in MOBIKE scenarios 4.2.4
authorAndreas Steffen <andreas.steffen@strongswan.org>
Thu, 26 Jun 2008 09:46:23 +0000 (09:46 -0000)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Thu, 26 Jun 2008 09:46:23 +0000 (09:46 -0000)
testing/tests/ikev2/mobike-nat/evaltest.dat
testing/tests/ikev2/mobike-nat/test.conf
testing/tests/ikev2/mobike-virtual-ip/evaltest.dat
testing/tests/ikev2/mobike-virtual-ip/test.conf
testing/tests/ikev2/mobike/evaltest.dat
testing/tests/ikev2/mobike/test.conf

index 541b218..f2758eb 100644 (file)
@@ -10,7 +10,9 @@ sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_MOON::YES
 alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
 sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
-moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP::YES
-moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP::YES
+sun::tcpdump::alice1.strongswan.org.*sun.strongswan.org: ESP.*seq=0x1::YES
+sun::tcpdump::sun.strongswan.org.*alice1.strongswan.org: ESP.*seq=0x1::YES
+moon::tcpdump::moon.strongswan.org.*sun.strongswan.org.*: UDP-encap: ESP.*seq=0x2::YES
+moon::tcpdump::sun.strongswan.org.*moon.strongswan.org.*: UDP-encap: ESP.*seq=0x2::YES
 bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
 bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
index 6467631..24a0cf3 100644 (file)
@@ -13,7 +13,7 @@ DIAGRAM="a-m-w-s-b.png"
 
 # UML instances on which tcpdump is to be started
 #
-TCPDUMPHOSTS="bob moon"
+TCPDUMPHOSTS="bob moon sun"
 
 # UML instances on which IPsec is started
 # Used for IPsec logging purposes
index 5be507d..94dea0b 100644 (file)
@@ -10,7 +10,9 @@ sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES
 alice::ipsec statusall::10.3.0.3/32 === 10.2.0.0/16::YES
 sun::ipsec statusall::10.2.0.0/16 === 10.3.0.3/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
-moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES
-moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES
+sun::tcpdump::alice1.strongswan.org.*sun.strongswan.org: ESP.*seq=0x1::YES
+sun::tcpdump::sun.strongswan.org.*alice1.strongswan.org: ESP.*seq=0x1::YES
+moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP.*seq=0x2::YES
+moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP.*seq=0x2::YES
 bob::tcpdump::10.3.0.3.*bob.strongswan.org.*ICMP echo request::YES
 bob::tcpdump::bob.strongswan.org.*10.3.0.3.*ICMP echo reply::YES
index 6467631..24a0cf3 100644 (file)
@@ -13,7 +13,7 @@ DIAGRAM="a-m-w-s-b.png"
 
 # UML instances on which tcpdump is to be started
 #
-TCPDUMPHOSTS="bob moon"
+TCPDUMPHOSTS="bob moon sun"
 
 # UML instances on which IPsec is started
 # Used for IPsec logging purposes
index 10bb37e..6c49c04 100644 (file)
@@ -10,8 +10,10 @@ sun::ipsec statusall::ESTABLISHED.*PH_IP_SUN.*PH_IP_ALICE::YES
 alice::ipsec statusall::PH_IP_ALICE/32 === 10.2.0.0/16::YES
 sun::ipsec statusall::10.2.0.0/16 === PH_IP_ALICE/32::YES
 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_seq=1::YES
-moon::tcpdump::alice.strongswan.org.*sun.strongswan.org.*: ESP::YES
-moon::tcpdump::sun.strongswan.org.*alice.strongswan.org.*: ESP::YES
+sun::tcpdump::alice1.strongswan.org.*sun.strongswan.org: ESP.*seq=0x1::YES
+sun::tcpdump::sun.strongswan.org.*alice1.strongswan.org: ESP.*seq=0x1::YES
+moon::tcpdump::alice.strongswan.org.*sun.strongswan.org: ESP.*seq=0x2::YES
+moon::tcpdump::sun.strongswan.org.*alice.strongswan.org: ESP.*seq=0x2::YES
 bob::tcpdump::alice1.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
 bob::tcpdump::bob.strongswan.org.*alice1.strongswan.org.*ICMP echo reply::YES
 bob::tcpdump::alice.strongswan.org.*bob.strongswan.org.*ICMP echo request::YES
index 6467631..24a0cf3 100644 (file)
@@ -13,7 +13,7 @@ DIAGRAM="a-m-w-s-b.png"
 
 # UML instances on which tcpdump is to be started
 #
-TCPDUMPHOSTS="bob moon"
+TCPDUMPHOSTS="bob moon sun"
 
 # UML instances on which IPsec is started
 # Used for IPsec logging purposes