DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity

PCAP_LOOP_SLEEP bug fix to 1/10th of a second

Browse Source 
[server] Updated PCAP_LOOP_SLEEP default to 1/10th of a second (in
microseconds).  This was supposed to be the default anyway, but C
Anthony Risinger reported a bug where fwknopd was consuming more
resources than necessary, and the cause was PCAP_LOOP_SLEEP set by
default to 1/100th of a second - this has been fixed.
This commit is contained in:
Michael Rash
2012-07-23 21:13:30 -04:00
parent 6255bff95f
commit 5387242ce9
5 changed files with 18 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog
+10 -5
View File
@@ -1,5 +1,5 @@
fwknop-2.0.1 (07//2012):
- Bug fix where the same encryption key used for two stanzas in
- [server] Bug fix where the same encryption key used for two stanzas in
the access.conf file would result in access requests that matched the
second stanza to always be treated as a replay attack. This has been
fixed for the fwknop-2.0.1 release, and was reported by Andy Rowland. Now
@@ -9,8 +9,13 @@ fwknop-2.0.1 (07//2012):
digest list right after the first access.conf stanza match, so when SPA
packet data matched the second access.conf stanza a matching replay
digest would already be there.
- Added SPA message validation calls to fko decoding routines to help
ensure that SPA messages conform to expected values.
- [server] Updated PCAP_LOOP_SLEEP default to 1/10th of a second (in
microseconds). This was supposed to be the default anyway, but C
Anthony Risinger reported a bug where fwknopd was consuming more
resources than necessary, and the cause was PCAP_LOOP_SLEEP set by
default to 1/100th of a second - this has been fixed.
- [libfko] Added SPA message validation calls to fko decoding routines to
help ensure that SPA messages conform to expected values.
- Bug fix for PF firewalls: updated the PF anchor check to not rely on
listing the PF policy - fwknopd now uses 'pfctl -s Anchor' instead.
- [test suite] Added parsing of valgrind output to produce a listing of
@@ -20,8 +25,8 @@ fwknop-2.0.1 (07//2012):
instead of libfko.so. This fixes the existence check for libfko.
- [test suite] Added tests for --nat-local mode.
- [client] Fixed several minor memory leaks caught by valgrind.
- Minor gcc warning fix: fko_decode.c:43:17: warning: variable ‘edata_size’
set but not used [-Wunused-but-set-variable].
- [libfko] Minor gcc warning fix: fko_decode.c:43:17: warning: variable
‘edata_size’ set but not used [-Wunused-but-set-variable].
fwknop-2.0 (01/02/2012):
- This is the first production release that has been completely re-written