denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libipsec: Log a packet's ports and protocol in case of a policy mismatch

Browse Source
This commit is contained in:
Tobias Brunner
2017-03-02 08:27:31 +01:00
parent 2283c8148a
commit 6a8f1b8f2c
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libipsec/ipsec_processor.c
+7 -5
View File
@@ -148,9 +148,10 @@ static job_requeue_t process_inbound(private_ipsec_processor_t *this)
policy->destroy(policy);
break;
}
DBG1(DBG_ESP, "discarding inbound IP packet %H == %H due to "
"policy", ip_packet->get_source(ip_packet),
ip_packet->get_destination(ip_packet));
DBG1(DBG_ESP, "discarding inbound IP packet %#H == %#H [%hhu] due "
"to policy", ip_packet->get_source(ip_packet),
ip_packet->get_destination(ip_packet),
ip_packet->get_next_header(ip_packet));
/* no matching policy found, fall-through */
}
case IPPROTO_NONE:
@@ -198,8 +199,9 @@ static job_requeue_t process_outbound(private_ipsec_processor_t *this)
policy = ipsec->policies->find_by_packet(ipsec->policies, packet, FALSE, 0);
if (!policy)
{
DBG2(DBG_ESP, "no matching outbound IPsec policy for %H == %H",
packet->get_source(packet), packet->get_destination(packet));
DBG2(DBG_ESP, "no matching outbound IPsec policy for %#H == %#H [%hhu]",
packet->get_source(packet), packet->get_destination(packet),
packet->get_next_header(packet));
packet->destroy(packet);
return JOB_REQUEUE_DIRECT;
}