Changeset 985

Timestamp:

01/27/08 20:45:46 (10 months ago)

Author:

mbr

Message:

- Added full packet hex dumps (including packet headers) to fwknopd in
--debug --verbose mode. This is to help diagnose packet sniffing issues
over the loopback interface on Mac OS X (first reported by Sebastien
Jeanquier).

Files:

• fwknop/trunk/ChangeLog (modified) (1 diff)
• fwknop/trunk/VERSION (modified) (1 diff)
• fwknop/trunk/fwknop (modified) (2 diffs)
• fwknop/trunk/fwknopd (modified) (5 diffs)
• fwknop/trunk/knoptm (modified) (2 diffs)
• fwknop/trunk/knopwatchd.c (modified) (1 diff)
• fwknop/trunk/test/fwknop_test.pl (modified) (1 diff)

fwknop/trunk/ChangeLog

@@ +1 @@
+fwknop-1.9.2 (02//2008):
+    - Added full packet hex dumps (including packet headers) to fwknopd in
+      --debug --verbose mode.  This is to help diagnose packet sniffing issues
+      over the loopback interface on Mac OS X (first reported by Sebastien
+      Jeanquier).
+
-fwknop-1.9.1 (01/26/2008):
-    - Added ENABLE_OUTPUT_ACCESS keyword to access.conf file parsing. This

fwknop/trunk/VERSION

@@ -1 @@
-
+2-pre

fwknop/trunk/fwknop

@@ -17 +17 @@
-# Author: Michael Rash (mbr@cipherdyne.org)
-#
-
+2-pre
-#
-# Copyright (C) 2004-2007 Michael Rash (mbr@cipherdyne.org)
@@ -52 +52 @@
-use strict;
-
-
+2-pre
-my $revision_svn = '$Revision$';
-my $rev_num = '1';

fwknop/trunk/fwknopd

@@ -20 +20 @@
-# Author: Michael Rash (mbr@cipherdyne.org)
-#
-
+2-pre
-#
-# Copyright (C) 2004-2007 Michael Rash (mbr@cipherdyne.org)
@@ -63 +63 @@
-my $access_conf_file = '';
-
-
+2-pre
-my $revision_svn = '$Revision$';
-my $rev_num = '1';
@@ -332 +332 @@
-    my $transport_obj = '';
-
+    if ($debug) {
+        print STDERR localtime() . " [+] Received packet ***[" .
+            localtime() . "]***\n";
+        if ($verbose) {
+            print STDERR localtime() .
+                "     Complete raw packet data (hex dump, including ",
+                    "packet headers):\n";
+            &hex_dump($pkt);
+        }
+    }
+
-    if ($config{'AUTH_MODE'} eq 'ULOG_PCAP') {
-        ### The ulogd pcap writer does not include link layer information
@@ -365 +376 @@
-    }
-
-    print STDERR localtime() . " [+] Received packet ***[" .
-        localtime() . "]*** (" if $debug;
-
-    ### make sure we have _some_ data in the packet; in practice
-    ### any valid SPA message will be longer than 10 bytes, but this
@@ -376 +384 @@
-    $enc_msg_len = length($transport_obj->{'data'});
-    if (10 < $enc_msg_len and $enc_msg_len < 1500) {
-
+
+
-    } else {
-"$enc_msg_len bytes, not attempting decrypt)\n"
-
+localtime() . " [-] $enc_msg_len bytes, not ",
+"attempting decrypt)\n" 
-        return;
-    }

fwknop/trunk/knoptm

@@ -19 +19 @@
-# Author: Michael Rash (mbr@cipherdyne.org)
-#
-
+2-pre
-#
-# Copyright (C) 2004-2007 Michael Rash (mbr@cipherdyne.org)
@@ -54 +54 @@
-my $user_rc_file = '';
-
-
+2-pre
-my $revision_svn = '$Revision$';
-my $rev_num = '1';

fwknop/trunk/knopwatchd.c

@@ -14 +14 @@
-*  Credits:  (see the CREDITS file)
-*
-
+2-pre
-*
-*  Copyright (C) 2004-2007 Michael Rash (mbr@cipherdyne.org)

fwknop/trunk/test/fwknop_test.pl

@@ -10 +10 @@
-# Author: Michael Rash (mbr@cipherdyne.org)
-#
-
+2-pre
-#
-# Copyright (C) 2007 Michael Rash (mbr@cipherdyne.org)