search for: net_packet

aG93IHRvIGNoZWNrb3V0IHRoZSBsYXN0IGRldmVsb3AgdGluYz8gKENWUyxjb21wbGllIGFibGUp DQo= Tinc: Discussion list about the tinc VPN daemon Archive: http://mail.nl.linux.org/lists/ Tinc site: http://tinc.nl.linux.org/

--- doc/tinc.conf.5.in | 3 +++ src/linux/device.c | 7 +++++++ 2 files changed, 10 insertions(+), 0 deletions(-) diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in index 2bfd5fe..01f7f81 100644 --- a/doc/tinc.conf.5.in +++ b/doc/tinc.conf.5.in @@ -255,6 +255,9 @@ a lookup if your DNS server is not responding. This does not affect resolving hostnames to IP addresses from the host

...ocal interface? */ + uint32_t pmtud:1; /* is this packet used for PMTU discovery? */ + uint32_t unused:30; /* unused bits */ + } flags; uint32_t seqno; /* 32 bits sequence number (network byte order of course) */ uint8_t data[MAXSIZE]; } vpn_packet_t; ------------------------------- src/net_packet.c ------------------------------ diff --git a/src/net_packet.c b/src/net_packet.c index aef5534..5556326 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -72,6 +72,7 @@ void send_mtu_probe(node_t *n) { vpn_packet_t packet; + memset(&packet.flags, 0, sizeof(packet.flags)); int len,...

...leep vsyslog writev], +AC_CHECK_FUNCS([asprintf daemon fchmod flock ftime fork get_current_dir_name gettimeofday mlockall pselect putenv random recvmmsg select strdup strerror strsignal strtol system unsetenv usleep vsyslog writev], [], [], [#include "src/have.h"] ) diff --git a/src/net_packet.c b/src/net_packet.c index e67857c..174db34 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -695,31 +695,26 @@ static node_t *try_harder(const sockaddr_t *from, const vpn_packet_t *pkt) { return n; } -void handle_incoming_vpn_data(int sock) { - vpn_packet_t pkt; +#ifdef HAVE_RECVMMSG +...

...usleep unsetenv vsyslog writev], +AC_CHECK_FUNCS([asprintf daemon fchmod flock ftime fork get_current_dir_name gettimeofday mlockall putenv random recvmmsg select strdup strerror strsignal strtol system time usleep unsetenv vsyslog writev], [], [], [#include "src/have.h"] ) --- src/net_packet.c.original 2015-10-02 16:26:36.828841493 +0200 +++ src/net_packet.c 2015-10-02 17:15:05.892051503 +0200 @@ -1057,92 +1057,137 @@ return n; } +#ifdef HAVE_RECVMMSG +#define MAX_MSG 256 +#else +#define MAX_MSG 1 +#endif + void handle_incoming_vpn_data(void *data, int flags) { listen_socket_...

...his packet compressed? */ + uint32_t unused:28; /* unused bits */ + } flags; + uint32_t flag_bits; /* to easily zero out and access flag bits */ + }; uint32_t seqno; /* 32 bits sequence number (network byte order of = course) */ uint8_t data[MAXSIZE]; } vpn_packet_t; diff --git a/src/net_packet.c b/src/net_packet.c index 5556326..4258599 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -72,7 +72,9 @@ =20 void send_mtu_probe(node_t *n) { vpn_packet_t packet; - memset(&packet.flags, 0, sizeof(packet.flags)); + packet.flag_bits =3D 0; + packet.flags.pmtud =3D 1; + int len, i;...

...eceived UDP packet from unknown source x.x.x.x port 10192 This is not the port specified in the configuration, but I don't really understand why tinc should care about that. The security shouldn't depend on IP and port numbers, but on the crypto (MAC etc). So why not remove this check from net_packet.c? (I'm referring to the last lines of said file.) I wanted to try and comment it out, but unfortanetely I can't compile tinc yet (OpenBSD). I'll investigate. -- -- Andreas [ http://unstable.nl ] ( O3IXI8E0OC ) -------------- next part -------------- A non-text attachment was scr...

...]: Old connection_t for Jupiter (82.170.170.203 port 655) status 00d0 still lingering, deleting... Jun 21 03:52:10 Delta tinc.ufonet[2366]: Got fatal signal 11 (Segmentation fault) Jun 21 03:52:10 Delta tinc.ufonet[2366]: Checkpoint trace: meta.c:42 <- protocol.c:76 <- protocol_key.c:91 <- net_packet.c:302 <- net_packet.c:69 <- event.c:106 <- event.c:115 <- protocol.c:238 <- route.c:140 <- conf.c:82 <- conf.c:82 <- conf.c:82 <- conf.c:82 <- conf.c:67 <- connection.c:79 <- connection.c:130... Jun 21 03:52:10 Delta tinc.ufonet[2366]: Trying to re-execute in 5 s...

...a option in tinc.conf like "TrustedNodes=aaa,bbb,ccc" ? With this option : (a) any ADD_EDGE/ADD_SUBNET/ANS_KEY/... will be cancelled if it comes from a non-trusted connection (b) all REQ_KEY will be sent to trusted nodes only. (a) is easy, but we do not know how to manage (b). In net_packet.c and protocol_key.c we see : send_req_key(n->nexthop->connection, myself, n); The question is : how to be sure that "n->nexthop->connection" will be a "trusted connection" ? (c->name in TrustedNode). One of our question is : if we cancel any ADD_* from...

...asprintf(&fname, "%s/hosts/%s", confbase, c->name); if(stat(fname, &s) || s.st_mtime > last_config_check) - terminate_connection(c, c->status.active); + terminate_connection(c, c->status.st.active); free(fname); } diff -ubr tinc-1.0.8/src/net_packet.c tinc-1.0.8.my/src/net_packet.c --- tinc-1.0.8/src/net_packet.c Sat Dec 16 13:46:40 2006 +++ tinc-1.0.8.my/src/net_packet.c Thu Sep 25 11:56:40 2008 @@ -303,7 +303,7 @@ /* Make sure we have a valid key */ - if(!n->status.validkey) { + if(!n->status.st.validkey) { ifdebug(TRAFFIC) lo...

...g writev], > +AC_CHECK_FUNCS([asprintf daemon fchmod flock ftime fork get_current_dir_name gettimeofday mlockall putenv random recvmmsg select strdup strerror strsignal strtol system time usleep unsetenv vsyslog writev], > [], [], [#include "src/have.h"] > ) > > --- src/net_packet.c.original 2015-10-02 16:26:36.828841493 +0200 > +++ src/net_packet.c 2015-10-02 17:15:05.892051503 +0200 > @@ -1057,92 +1057,137 @@ > return n; > } > > +#ifdef HAVE_RECVMMSG > +#define MAX_MSG 256 > +#else > +#define MAX_MSG 1 > +#endif > + > vo...

...aking all in src make[2]: Entering directory `/usr/src/tinc/src' gcc -g -O2 -DCONFDIR=\"/usr/local/etc\" -DLOCALEDIR=\"/usr/local/share/locale\" -DLOCALSTATEDIR=\"/usr/local/var\" -g -O2 -o tincd conf.o connection.o edge.o event.o graph.o logger.o meta.o net.o net_packet.o net_setup.o net_socket.o netutl.o node.o process.o protocol.o protocol_auth.o protocol_edge.o protocol_misc.o protocol_key.o protocol_subnet.o route.o subnet.o tincd.o ../lib/libvpn.a -lcrypto -lz -llzo graph.o: In function `sssp_bfs':/usr/src/tinc/src/graph.c:278: undefined reference to...

A while back I expressed interest in trying to add additional compression formats (XZ, ZPAQ-derived). What would be the best way for me to try these with the 1.1 codebase? And can 1.1 be used with 1.0.x nets out-of-box? http://en.wikipedia.org/wiki/Xz http://mattmahoney.net/dc/zpaq.html -------------- next part -------------- An HTML attachment was scrubbed... URL:

...I've got the following error when tried to compile tinc-1.0.24: gcc -g -O2 -pie -L/opt/local/lib -o tincd avl_tree.o conf.o connection.o dropin.o dummy_device.o edge.o event.o fake-getaddrinfo.o fake-getnameinfo.o getopt.o getopt1.o graph.o list.o logger.o meta.o multicast_device.o net.o net_packet.o net_setup.o net_socket.o netutl.o node.o pidfile.o process.o protocol.o protocol_auth.o protocol_edge.o protocol_misc.o protocol_key.o protocol_subnet.o raw_socket_device.o route.o subnet.o tincd.o utils.o xmalloc.o bsd/device.o -lcrypto -lz -llzo2 clang: warning: argument unused duri...

...39;t want to muddy the waters by committing anything significant when there's still a crash going on. crash 1: ==28913== Invalid read of size 8 ==28913== at 0x412150: list_unlink_node (list.c:97) ==28913== by 0x412278: list_delete_node (list.c:111) ==28913== by 0x407143: flush_queue (net_packet.c:451) ==28913== by 0x40E2AE: ans_key_h (protocol_key.c:239) ==28913== by 0x40BC58: receive_request (protocol.c:157) ==28913== by 0x405B87: receive_meta (meta.c:138) ==28913== by 0x406867: handle_meta_connection_data (net.c:225) ==28913== by 0x4C0FAC0: event_base_loop (event.c:318) =...

..._ext_h(REQ_KEY) is already > smart enough to restart SPTPS if there's already a channel. > Furthermore, if we allow the old and new channels to overlap for a > short period of time, we can prevent packet loss during regeneration. I think this just shifts the complexity from sptps.c to net_packet.c. So I'd rather fix SPTPS. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature U...

Hi Guus, while checking the source code, I stumbled upon PMTU Discovery. I've got a question regarding the process of sending/receiving PMTU packets. As I understand, the packet flow is like this: 1 .Tinc creates a packet with a specific payload length to send it as an PMTU probe. (The data part is just some random bytes.) 2. This packet gets compressed and sent

...ailman/listinfo/tinc >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20150612/61a261a2/attachment-0002.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: net_packet.c.patch Type: application/octet-stream Size: 768 bytes Desc: not available URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20150612/61a261a2/attachment-0001.obj> -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc...

Sure, I?ll see if we can narrow it down for you. > On Jun 12, 2015, at 2:25 PM, Etienne Dechamps <etienne at edechamps.fr> wrote: > > That's interesting. I'm using a near-HEAD tinc-1.1 myself and haven't > encountered this problem, but I think that's because I'm using it in > router mode, as opposed to switch mode. > > I'm trying to narrow

Hi, I'm currently trying to troubleshoot what appears to be a very subtle bug (most likely a race condition) in SPTPS that causes state to become corrupted during SPTPS key regeneration. The tinc version currently deployed to my production nodes is git 7ac5263, which is somewhat old (2014-09-06), but I think this is still relevant because the affected code paths haven't really changed