denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libipsec: Log a packet's ports and protocol in case of a policy mismatch

Browse Source
This commit is contained in:
Tobias Brunner
2017-03-02 08:27:31 +01:00
parent 2283c8148a
commit 6a8f1b8f2c
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libipsec/ipsec_processor.c
+7 -5
View File
@@ -148,9 +148,10 @@ static job_requeue_t process_inbound(private_ipsec_processor_t *this)
policy->destroy(policy); policy->destroy(policy);
break; break;
} }
DBG1(DBG_ESP, "discarding inbound IP packet %H == %H due to " DBG1(DBG_ESP, "discarding inbound IP packet %#H == %#H [%hhu] due "
"policy", ip_packet->get_source(ip_packet), "to policy", ip_packet->get_source(ip_packet),
ip_packet->get_destination(ip_packet)); ip_packet->get_destination(ip_packet),
ip_packet->get_next_header(ip_packet));
/* no matching policy found, fall-through */ /* no matching policy found, fall-through */
} }
case IPPROTO_NONE: case IPPROTO_NONE:
@@ -198,8 +199,9 @@ static job_requeue_t process_outbound(private_ipsec_processor_t *this)
policy = ipsec->policies->find_by_packet(ipsec->policies, packet, FALSE, 0); policy = ipsec->policies->find_by_packet(ipsec->policies, packet, FALSE, 0);
if (!policy) if (!policy)
{ {
DBG2(DBG_ESP, "no matching outbound IPsec policy for %H == %H", DBG2(DBG_ESP, "no matching outbound IPsec policy for %#H == %#H [%hhu]",
packet->get_source(packet), packet->get_destination(packet)); packet->get_source(packet), packet->get_destination(packet),
packet->get_next_header(packet));
packet->destroy(packet); packet->destroy(packet);
return JOB_REQUEUE_DIRECT; return JOB_REQUEUE_DIRECT;
} }