| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Syntax of pf(4) route-to has changed. Adapt tests. |   bluhm | 2021-02-01 | 2 | -6/+6 |
| | | |||||
| * | py3-scapy is now scapy |   kn | 2020-12-30 | 1 | -3/+3 |
| | | | | | OK bluhm sthen | ||||
| * | Switch to scapy with python 3. | bluhm | 2020-12-25 | 18 | -177/+177 |
| | | |||||
| * | Remove echo headlines. | bluhm | 2020-12-17 | 1 | -22/+1 |
| | | |||||
| * | Do not create files as dependency of .BEGIN rule. Noticed by | bluhm | 2020-01-15 | 1 | -3/+3 |
| | | | | | deraadt@ with make obj in regress. | ||||
| * | Rework when tests have to be skipped due to insufficient configuration | bluhm | 2020-01-08 | 1 | -4/+19 |
| | | | | | of the regress machine. | ||||
| * | Simplify the detection for installed python and scapy. Refactor | bluhm | 2019-05-10 | 1 | -49/+44 |
| | | | | | | these tests to make them similar. Use the setup and cleanup variables. | ||||
| * | Remove useless make depend targets. | bluhm | 2017-07-07 | 1 | -3/+1 |
| | | |||||
| * | To test IPv6 fragements with extension header, the pf pass rules | bluhm | 2017-06-07 | 1 | -4/+4 |
| | | | | | need an allow-opts. Otherwise pf blocks packets with option header. | ||||
| * | Fix typo in variable name. | bluhm | 2017-01-24 | 2 | -2/+2 |
| | | |||||
| * | Do not use privileged or NFS source ports for UDP packets as inetd | bluhm | 2017-01-18 | 17 | -71/+99 |
| | | | | | | ignores such packets. This should avoid some sporadic failures. While there, use variable names consistently in all tests. | ||||
| * | During sniffing filter strictly on icmp6 "packet too big" to avoid | bluhm | 2016-10-20 | 2 | -1/+6 |
| | | | | | that "neighbor discovery" confuses the test. | ||||
| * | By removing all the sleeps I created a race in the pf tests. The | bluhm | 2016-10-20 | 12 | -0/+12 |
| | | | | | | | | | packet was sent and its reply received before the sniffer was up and running. So sleep a second after starting the sniffer thread but before sending the packet. With pf_forward 0m51.54s, pf_fragment 1m33.59s, pf_state 0m03.64s the test are still faster than with forking. | ||||
| * | Replace fork() and sleep() with a Python thread for sniffing packets. | bluhm | 2016-10-20 | 12 | -92/+212 |
| | | | | | This reduces test execution time from 2m21.95s to 1m09.80s. | ||||
| * | The clean:, cleandir:, and obj: targets of src/Makefile descend into |   tb | 2016-10-19 | 1 | -1/+3 |
| | | | | | | | | | regress/ and run python to set the IMPORT_PYTHON variable in several test Makefiles. This results in W^X violations during 'make build'. Avoid doing that. ok bluhm | ||||
| * | Print SKIPPED if a regress test cannot be executed for some reason. | bluhm | 2016-09-02 | 1 | -1/+3 |
| | | | | | This allows to identify such tests by looking at their output. | ||||
| * | Split the check-setup target into smaller parts to make it easier | bluhm | 2016-08-31 | 1 | -6/+14 |
| | | | | | to configure the regression test machines. | ||||
| * | comment typos |   sthen | 2016-05-28 | 1 | -8/+8 |
| | | |||||
| * | Fix tests: Restrict getpid() to lower 16 bit so that it can still | bluhm | 2016-05-22 | 17 | -18/+18 |
| | | | | | | be used as packet id. Now scapy calls nexthopmtu with this name explicitly in icmp structure. | ||||
| * | Route output to local addresses has changed, ping6 command line | bluhm | 2015-11-01 | 1 | -14/+14 |
| | | | | | options have changed, tun has been renamed to tap. Adapt tests. | ||||
| * | Extend the pf forward and fragment tests with a second challenge | bluhm | 2015-08-24 | 6 | -19/+31 |
| | | | | | | | | | | for path MTU discovery. The router behind the pf machine has MTU 1300. The ICMP packet generated by the router matches the pf state and is NATed correctly. Additionally the pf machine itself has an interface MTU 1400. So when pf is sending a packet is has to generate a correct "fragmentation needed" or "packet too big" ICMP response. This is done with pf route-to and reply-to. | ||||
| * | Enable path MTU test with ping for IPv6. Scapy srp1() does not | bluhm | 2015-08-24 | 2 | -8/+18 |
| | | | | | | | accept inner IPv6 packets in ICMP6 with bad checksum created by pf. Use same workaround as in pf_forward tests and fork a process for sniffing. | ||||
| * | Add forwarding tests for pf route-to and reply-to. Keep pf forward | bluhm | 2015-08-17 | 1 | -20/+30 |
| | | | | | and pf fragment tests in sync. | ||||
| * | Add IPv6 fragment tests for pf route-to. A big ping packet is sent | bluhm | 2015-08-13 | 2 | -24/+32 |
| | | | | | | | | in fragments to a machine running pf. From there it is forwarded with route-to to a router with a smaller MTU. Path MTU discovery has to make successive fragments shorter and pf route-to has to preserve the fragment size. | ||||
| * | Extend the setup with another address for testing pf route-to. | bluhm | 2015-07-21 | 2 | -12/+27 |
| | | |||||
| * | When test pf.conf changes, check its syntax and use the new one. | bluhm | 2015-07-20 | 1 | -2/+3 |
| | | |||||
| * | Use a simpler expression to check the ether type in scapy. This | bluhm | 2014-12-19 | 16 | -16/+16 |
| | | | | | makes the fragment tests work on FreeBSD. From Ilya Bakulin. | ||||
| * | The pf forward tests were running rdr-to and nat-to simultaneously | bluhm | 2014-07-18 | 1 | -4/+4 |
| | | | | | | only. Change address layout and add individual tests for each feature rdr-to and nat-to and rdr-to together with nat-to. | ||||
| * | Make the pf_fragment test pass again. pf does not adjust the | bluhm | 2014-07-13 | 1 | -15/+15 |
| | | | | | | | checksum of a NATed UDP or TCP packet in the payload of an ICMP packet anymore. Disable all test that rely on this feature. Check that the router's interface mtu has been set to 1300. | ||||
| * | Automatically load the required pf rules into the kernel of the | bluhm | 2014-07-12 | 2 | -34/+51 |
| | | | | | remote test machine. | ||||
| * | Teach these pf regress tests to run with obj directory and to fail | bluhm | 2014-07-12 | 1 | -26/+51 |
| | | | | | softly if the setup is incomplete. Link them to the build. | ||||
| * | Use a saner and consistent address layout for my network tests that | bluhm | 2014-07-12 | 1 | -77/+139 |
| | | | | | | run over 4 machines. Add a check-setup target to verify that interface addresses and routes are properly set up. | ||||
| * | Fix run-regress-fragping to use ping(8) instead of ping6(8) to send the |   lteo | 2013-10-17 | 1 | -2/+2 |
| | | | | | | | initial Path-MTU discovery packet. OK bluhm@ | ||||
| * | Do not write spaces around = in addr.py so it can also be read by | bluhm | 2012-07-10 | 1 | -6/+6 |
| | | | | | the shell. | ||||
| * | Kill trailing whitespaces. | bluhm | 2012-07-10 | 18 | -19/+19 |
| | | |||||
| * | Add addr.py to CLEANFILES. | bluhm | 2012-07-08 | 1 | -2/+2 |
| | | |||||
| * | According to RFC 5722 we drop all IPv6 fragments that belong to a | bluhm | 2012-01-13 | 4 | -29/+30 |
| | | | | | packet with overlaps. Adapt existing tests. | ||||
| * | Add tests for pf fragment reassembly with all kinds of overlapping. | bluhm | 2011-09-21 | 12 | -2/+664 |
| | | | | | | Some fragments contain invalid data, this must be replaced to reassemble a valid packet. | ||||
| * | Add a test suite to route ip fragments through a box running pf. | bluhm | 2011-09-19 | 7 | -0/+390 |
| You have to setup four machines manually as described in the makefile. The test uses scapy and python to send ping echo request or udp echo packets along the routers. It analyzes the returned ping echo reply or udp packets or the icmp error packets. | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |