From: <orl...@us...> - 2012-10-11 22:11:53
|
Revision: 245 http://openhip.svn.sourceforge.net/openhip/?rev=245&view=rev Author: orliebrewer Date: 2012-10-11 22:11:47 +0000 (Thu, 11 Oct 2012) Log Message: ----------- Added code to send an ICMP packet of type "Parameter Problem" in response to an ESP packet with an unknown SPI as per RFC 5202. A HIP process receiving an ICMP packet of type "Parameter Problem" for a HIP association will send a HIP address check UPDATE to its peer for that HIP assoication. If there is no response, that HIP association will be deleted. If the UPDATE is successful, HIP will ignore future ICMP packets for that HIP assoication for a configurable amount of time. The icmp_timeout tag in the hip.conf controls this behavior. If not present or set to a value of zero, no ICMP packets will be sent or responded to. If set to a value greater than zero, HIP will send and respond to ICMP packets as described above and will ignore future ICMP packets for that number of seconds after a successful address check UPDATE exchange. Modified Paths: -------------- hip/trunk/src/include/hip/hip_types.h hip/trunk/src/linux/hip_linux_umh.c hip/trunk/src/protocol/hip_input.c hip/trunk/src/protocol/hip_main.c hip/trunk/src/usermode/hip_esp.c hip/trunk/src/util/hip_util.c hip/trunk/src/util/hip_xml.c This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |