Skip to content

Commit

Permalink
Probe-modules: IPIP (#684)
Browse files Browse the repository at this point in the history
* Add ipip probe module

* IPIP: fix validate function

* ipip: fix validation failure when setting src ip

When packets with source ip which is not the receiving address for
replies (e.g. behin NAT) validation data was computed with the actual
receiving address on receive. However, on send it is computed with the
sending address. This discrepancy made valid packets fail validation.

This commit fixes the discrepancy by trying every possible sender IP
when validating a packet.

* Consistent indentation in probe_modules.c

* fixed up merge issues, added multi-port feature into ipip

* fixed up ipip probe function definitions and added ip id

---------

Co-authored-by: Yoav Alon <yoava333@gmail.com>
Co-authored-by: Zakir Durumeric <zakird@gmail.com>
Co-authored-by: phillip-stephens <phillip@cs.stanford.edu>
  • Loading branch information
4 people committed Mar 5, 2024
1 parent 060cff8 commit f0ba1ad
Show file tree
Hide file tree
Showing 3 changed files with 435 additions and 6 deletions.
1 change: 1 addition & 0 deletions src/CMakeLists.txt
Expand Up @@ -27,6 +27,7 @@ set(PROBE_MODULE_SOURCES
probe_modules/module_tcp_synackscan.c
#probe_modules/module_tcp_cisco_backdoor.c
probe_modules/module_udp.c
probe_modules/module_ipip.c
probe_modules/packet.c
probe_modules/probe_modules.c
probe_modules/module_ntp.c
Expand Down

0 comments on commit f0ba1ad

Please sign in to comment.