]> git.openpandora.org Git - pandora-kernel.git/commit
{pktgen, xfrm} Update IPv4 header total len and checksum after tranformation
authorfan.du <fan.du@windriver.com>
Sun, 1 Dec 2013 08:28:48 +0000 (16:28 +0800)
committerBen Hutchings <ben@decadent.org.uk>
Fri, 3 Jan 2014 04:33:34 +0000 (04:33 +0000)
commitebca8c26fb22fca588fdcf5e5baa409da399247f
treea29646e107cb7dc9adf531a905a4cce72e1aa516
parent24e3644c3770b8b5914cd4e13c5594c41bb0d791
{pktgen, xfrm} Update IPv4 header total len and checksum after tranformation

[ Upstream commit 3868204d6b89ea373a273e760609cb08020beb1a ]

commit a553e4a6317b2cfc7659542c10fe43184ffe53da ("[PKTGEN]: IPSEC support")
tried to support IPsec ESP transport transformation for pktgen, but acctually
this doesn't work at all for two reasons(The orignal transformed packet has
bad IPv4 checksum value, as well as wrong auth value, reported by wireshark)

- After transpormation, IPv4 header total length needs update,
  because encrypted payload's length is NOT same as that of plain text.

- After transformation, IPv4 checksum needs re-caculate because of payload
  has been changed.

With this patch, armmed pktgen with below cofiguration, Wireshark is able to
decrypted ESP packet generated by pktgen without any IPv4 checksum error or
auth value error.

pgset "flag IPSEC"
pgset "flows 1"

Signed-off-by: Fan Du <fan.du@windriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/core/pktgen.c