diff options
| author |   Klement Sekera <ksekera@cisco.com> | 2021-06-28 13:40:40 +0200 |
|---|---|---|
| committer |   Ole Tr�an <otroan@employees.org> | 2021-07-19 17:46:33 +0000 |
| commit | 05b5a5b3b4b04823776feed6403b5a99b2e06d76 (patch) | |
| tree | b3becc951fccb20f0785acf6f4349a0a2b16a484 /test | |
| parent | 04572bea3499ab013d92799648c38b021767ff39 (diff) | |
nat: harden ICMP handling
Verify that headers are not truncated and that checksums are valid.
Correct checksum computation in translation code.
Type: fix
Change-Id: I6acfcec4661411f83c86b15aafac90cd4538c0b5
Signed-off-by: Klement Sekera <ksekera@cisco.com>
Diffstat (limited to 'test')
| -rw-r--r-- | test/test_nat44_ed.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/test/test_nat44_ed.py b/test/test_nat44_ed.py index b8774a20d3d..ee76ce845c6 100644 --- a/test/test_nat44_ed.py +++ b/test/test_nat44_ed.py @@ -1215,6 +1215,7 @@ class TestNAT44ED(NAT44EDTestCase): self.pg_start() capture = self.pg1.get_capture(len(pkts)) self.verify_capture_out(capture, ignore_port=True) + self.logger.debug(self.vapi.cli("show trace")) # out2in pkts = self.create_stream_out(self.pg1) @@ -1223,6 +1224,7 @@ class TestNAT44ED(NAT44EDTestCase): self.pg_start() capture = self.pg0.get_capture(len(pkts)) self.verify_capture_in(capture, self.pg0) + self.logger.debug(self.vapi.cli("show trace")) # in2out pkts = self.create_stream_in(self.pg0, self.pg1, ttl=2) @@ -1231,6 +1233,7 @@ class TestNAT44ED(NAT44EDTestCase): self.pg_start() capture = self.pg1.get_capture(len(pkts)) self.verify_capture_out(capture, ignore_port=True) + self.logger.debug(self.vapi.cli("show trace")) # out2in pkts = self.create_stream_out(self.pg1, ttl=2) @@ -1239,6 +1242,7 @@ class TestNAT44ED(NAT44EDTestCase): self.pg_start() capture = self.pg0.get_capture(len(pkts)) self.verify_capture_in(capture, self.pg0) + self.logger.debug(self.vapi.cli("show trace")) # in2out pkts = self.create_stream_in(self.pg0, self.pg1, ttl=1) |