ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

kernel-wfp: Show a warning for packets the kernel drops in its IPsec layers

This commit is contained in:
Martin Willi 2013-12-24 10:01:35 +01:00
parent a4f3b363da
commit c7d30c2ad1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
View File

@ -1515,6 +1515,12 @@ static void event_callback(private_kernel_wfp_ipsec_t *this,
case FWPM_NET_EVENT_TYPE_IKEEXT_QM_FAILURE:
case FWPM_NET_EVENT_TYPE_IKEEXT_EM_FAILURE:
case FWPM_NET_EVENT_TYPE_IPSEC_KERNEL_DROP:
DBG1(DBG_KNL, "IPsec kernel drop: %R === %R, error 0x%08x, "
"SPI 0x%08x, %s filterId %llu", local, remote,
event->ipsecDrop->failureStatus, event->ipsecDrop->spi,
event->ipsecDrop->direction ? "in" : "out",
event->ipsecDrop->filterId);
break;
case FWPM_NET_EVENT_TYPE_IPSEC_DOSP_DROP:
default:
break;