summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
diff options
context:
space:
mode:
authorNeale Ranns <nranns@cisco.com>2019-01-22 06:42:23 -0800
committerDamjan Marion <dmarion@me.com>2019-01-23 11:03:51 +0000
commit71ad6a9bf02d00e51b0959c33edc1b10dc857353 (patch)
tree735e664cdaf17312f3abcb0ba71d7433fd4074d1 /src/vnet/ipsec
parente51a7a08492190684041a2232dbeacf064d3645a (diff)
AH encrypt; don't double enqueue nor emit clib_warnings when seq-num max exceeded
Change-Id: Id5b47f78521a0cbedf7bd2c72babfb2ffe9fa67d Signed-off-by: Neale Ranns <nranns@cisco.com>
Diffstat (limited to 'src/vnet/ipsec')
-rw-r--r--src/vnet/ipsec/ah_encrypt.c5
1 files changed, 0 insertions, 5 deletions
diff --git a/src/vnet/ipsec/ah_encrypt.c b/src/vnet/ipsec/ah_encrypt.c
index 0dc1612db5e..8b0c14f0cf3 100644
--- a/src/vnet/ipsec/ah_encrypt.c
+++ b/src/vnet/ipsec/ah_encrypt.c
@@ -125,13 +125,8 @@ ah_encrypt_inline (vlib_main_t * vm,
if (PREDICT_FALSE (esp_seq_advance (sa0)))
{
- clib_warning ("sequence number counter has cycled SPI %u",
- sa0->spi);
vlib_node_increment_counter (vm, node->node_index,
AH_ENCRYPT_ERROR_SEQ_CYCLED, 1);
- //TODO need to confirm if below is needed
- to_next[0] = i_bi0;
- to_next += 1;
goto trace;
}