Code Review
/
vpp.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
IPSEC-AH: fix packet drop
[vpp.git]
/
src
/
vnet
/
ipsec
/
ah_decrypt.c
diff --git
a/src/vnet/ipsec/ah_decrypt.c
b/src/vnet/ipsec/ah_decrypt.c
index
34ea000
..
9b0c16e
100644
(file)
--- a/
src/vnet/ipsec/ah_decrypt.c
+++ b/
src/vnet/ipsec/ah_decrypt.c
@@
-156,7
+156,6
@@
ah_decrypt_inline (vlib_main_t * vm,
if (PREDICT_FALSE (rv))
{
if (PREDICT_FALSE (rv))
{
- clib_warning ("anti-replay SPI %u seq %u", sa0->spi, seq);
if (is_ip6)
vlib_node_increment_counter (vm,
ah6_decrypt_node.index,
if (is_ip6)
vlib_node_increment_counter (vm,
ah6_decrypt_node.index,
@@
-165,8
+164,6
@@
ah_decrypt_inline (vlib_main_t * vm,
vlib_node_increment_counter (vm,
ah4_decrypt_node.index,
AH_DECRYPT_ERROR_REPLAY, 1);
vlib_node_increment_counter (vm,
ah4_decrypt_node.index,
AH_DECRYPT_ERROR_REPLAY, 1);
- to_next[0] = i_bi0;
- to_next += 1;
goto trace;
}
}
goto trace;
}
}
@@
-223,8
+220,6
@@
ah_decrypt_inline (vlib_main_t * vm,
ah4_decrypt_node.index,
AH_DECRYPT_ERROR_INTEG_ERROR,
1);
ah4_decrypt_node.index,
AH_DECRYPT_ERROR_INTEG_ERROR,
1);
- to_next[0] = i_bi0;
- to_next += 1;
goto trace;
}
goto trace;
}