diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-02-17 12:40:36 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-03-02 08:27:31 +0100 |
| commit | 6a8f1b8f2cb737011223f0d5b92249cad8e9728d (patch) | |
| tree | ca5f7dfb047dbc64e5a47f1178de99e6e9e3c59e | |
| parent | 2283c8148a2d67357c68256be3811a3059d7ef77 (diff) | |
| download | strongswan-6a8f1b8f2cb737011223f0d5b92249cad8e9728d.tar.bz2 strongswan-6a8f1b8f2cb737011223f0d5b92249cad8e9728d.tar.xz | |
libipsec: Log a packet's ports and protocol in case of a policy mismatch
| -rw-r--r-- | src/libipsec/ipsec_processor.c | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/src/libipsec/ipsec_processor.c b/src/libipsec/ipsec_processor.c index af79707d1..23b8ad21e 100644 --- a/src/libipsec/ipsec_processor.c +++ b/src/libipsec/ipsec_processor.c @@ -148,9 +148,10 @@ static job_requeue_t process_inbound(private_ipsec_processor_t *this) policy->destroy(policy); break; } - DBG1(DBG_ESP, "discarding inbound IP packet %H == %H due to " - "policy", ip_packet->get_source(ip_packet), - ip_packet->get_destination(ip_packet)); + DBG1(DBG_ESP, "discarding inbound IP packet %#H == %#H [%hhu] due " + "to policy", ip_packet->get_source(ip_packet), + ip_packet->get_destination(ip_packet), + ip_packet->get_next_header(ip_packet)); /* no matching policy found, fall-through */ } case IPPROTO_NONE: @@ -198,8 +199,9 @@ static job_requeue_t process_outbound(private_ipsec_processor_t *this) policy = ipsec->policies->find_by_packet(ipsec->policies, packet, FALSE, 0); if (!policy) { - DBG2(DBG_ESP, "no matching outbound IPsec policy for %H == %H", - packet->get_source(packet), packet->get_destination(packet)); + DBG2(DBG_ESP, "no matching outbound IPsec policy for %#H == %#H [%hhu]", + packet->get_source(packet), packet->get_destination(packet), + packet->get_next_header(packet)); packet->destroy(packet); return JOB_REQUEUE_DIRECT; } |