moon::ipsec status 2> /dev/null::net-net.*ESTABLISHED.*moon.strongswan.org.*sun.strongswan.org::YES sun:: ipsec status 2> /dev/null::net-net.*ESTABLISHED.*sun.strongswan.org.*moon.strongswan.org::YES moon::ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES sun:: ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES moon::sleep 6::wait for rekeying::NO moon::cat /var/log/daemon.log::creating rekey job for CHILD_SA::YES moon::cat /var/log/daemon.log::generating CREATE_CHILD_SA request.*REKEY_SA::YES moon::cat /var/log/daemon.log::deleted SAD entry with SPI::1 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES moon::sleep 2::wait until inbound SA is deleted::NO moon::cat /var/log/daemon.log::deleted SAD entry with SPI::2 alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES