diff options
| author | Martin Willi <martin@revosec.ch> | 2013-12-24 10:01:35 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-06-04 16:32:10 +0200 |
| commit | c7d30c2ad16d4855ade151dc96a9404a56a70c4e (patch) | |
| tree | e0fe0a6e0129cdf4c4e95e59860b1ad17f3359df /src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c | |
| parent | a4f3b363dabd2ba435ba2cded4cbb0ecce0304e1 (diff) | |
| download | strongswan-c7d30c2ad16d4855ade151dc96a9404a56a70c4e.tar.bz2 strongswan-c7d30c2ad16d4855ade151dc96a9404a56a70c4e.tar.xz | |
kernel-wfp: Show a warning for packets the kernel drops in its IPsec layers
Diffstat (limited to 'src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c')
| -rw-r--r-- | src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c index d471a0010..1b73b59da 100644 --- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c +++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c @@ -1515,6 +1515,12 @@ static void event_callback(private_kernel_wfp_ipsec_t *this, case FWPM_NET_EVENT_TYPE_IKEEXT_QM_FAILURE: case FWPM_NET_EVENT_TYPE_IKEEXT_EM_FAILURE: case FWPM_NET_EVENT_TYPE_IPSEC_KERNEL_DROP: + DBG1(DBG_KNL, "IPsec kernel drop: %R === %R, error 0x%08x, " + "SPI 0x%08x, %s filterId %llu", local, remote, + event->ipsecDrop->failureStatus, event->ipsecDrop->spi, + event->ipsecDrop->direction ? "in" : "out", + event->ipsecDrop->filterId); + break; case FWPM_NET_EVENT_TYPE_IPSEC_DOSP_DROP: default: break; |