#!/bin/sh
# DF-3398 inbound-oracle proof: which raw icmp_ids find a NAT state?
# OOB-populated slots (64512..64515) should translate+forward; control
# ids should be denied.
{
tcpdump -i vtnet0 -n -c 10 icmp >/root/cap.txt 2>/root/cap.err &
TPID=$!
sleep 1
echo "--- sending OOB ids (slots 64512/64513/64514/64515)"
/root/icmp_in fc00; sleep 1
/root/icmp_in fc01; sleep 1
/root/icmp_in fc02; sleep 1
/root/icmp_in fc03; sleep 1
echo "--- sending control ids (empty slots)"
/root/icmp_in abcd; sleep 1
/root/icmp_in 0100; sleep 1
sleep 2
kill $TPID 2>/dev/null
sleep 1
echo "=== tcpdump captures (vtnet0 egress after translation):"
cat /root/cap.txt
echo "=== errors:"
cat /root/cap.err
} > /root/proof_out.txt 2>&1
echo PROOFSCRIPT_DONE