Test Information

TitleDetect modification of DstOpt header option type before AH
CommandLine./HTR_A_In_DM_DSTH_opttype.seq -pkt ./HTR_A_DM_DSTH_opttype.def -log 17.html -ti Detect modification of DstOpt header option type before AH
TestVersionREL_2_1_1
ToolVersionREL_3_3_2
Start2011/10/24 15:29:49
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./HTR_A_DM_DSTH_opttype.def
Systemfreebsd-i386
TargetNamefreebsd-head
HostNameipv6-conf
Typehost

Test Sequence Execution Log

15:29:49Start

*** Target initialization phase ***
Target: Clear all SAD and SPD entries
15:29:49 vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecClearAll.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 ''
Connected

# 
# /sbin/setkey -c <<EOD
spdflush;
flush;
EOD

# # sendMessagesSync: never got /sbin/setkey -c <<EODspdflush;flush;EOD
echo $status
0~
[EOT]

Target: Set SAD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF
15:29:54 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSAD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF ''
Connected

# 
# /sbin/setkey -c <<EOD
add 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
    ah 0x1000
    -m transport
    -A hmac-md5 "TAHITEST89ABCDEF"
;
dump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8 
        ah mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
        A: hmac-md5  54414849 54455354 38394142 43444546
        seq=0x00000000 replay=0 flags=0x00000040 state=mature 
        created: Oct 25 11:08:08 2011   current: Oct 25 11:08:08 2011
        diff: 0(s)      hard: 0(s)      soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=0 pid=1380 refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8    ah 0x1000    -m transport    -A hmac-md5 "TAHITEST89ABCDEF";dump;EOD
echo $status
0~
[EOT]

Target: Set SPD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=ah mode=transport
15:29:59 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuau0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8" upperspec=any direction=in protocol=ah mode=transport ''
Connected

# 
# /sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8
       any
       -P in ipsec
       ah/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
;
spddump;
EOD

3ffe:501:ffff:ff05:200:ff:fe00:c1c1[any] 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8[any] any
        in ipsec
        ah/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require
        spid=19 seq=0 pid=1381
        refcnt=1
# # sendMessagesSync: never got /sbin/setkey -c <<EODspdadd 3ffe:501:ffff:ff05:200:ff:fe00:c1c1 3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8       any       -P in ipsec       ah/transport/3ffe:501:ffff:ff05:200:ff:fe00:c1c1-3ffe:501:ffff:ff03:21c:23ff:fe09:f4e8/require;spddump;EOD
echo $status
0~
[EOT]

*** Target testing phase ***
15:30:05Start Capturing Packets (Link0)

Subtest No.1: option bit 000: option type is immutable
15:30:05 vSend(Link0,echo_request_from_host1_dstopt_ah)
send echo_request_from_host1_dstopt_ah
15:30:05 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host1
15:30:05 vRecv(Link0,ns_to_router_linkaddr ns_to_router) timeout:6 cntLimit:0 seektime:0
recv ns_to_router_linkaddr
15:30:10 vSend(Link0,na_from_router_linkaddr)
send na_from_router_linkaddr

NC about Router was PROBE state, but now it's REACHABLE.
15:30:10 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1
15:30:16 vRecv(Link0,ns_to_router_linkaddr) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received echo reply from NUT to HOST1.
15:30:22 vSend(Link0,echo_request_from_host1_ah_dm_dsth_000opttype)
send echo_request_from_host1_ah_dm_dsth_000opttype
15:30:22 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received no echo reply from NUT to HOST1.
TN ignored the modified echo request packet.
Subtest No.1 PASS

Subtest No.2: option bit 001: option type is immutable
15:30:28 vSend(Link0,echo_request_from_host1_ah_dm_dsth_001opttype)
send echo_request_from_host1_ah_dm_dsth_001opttype
15:30:28 vRecv(Link0,ns_to_router_linkaddr ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

TN received no echo reply from NUT to HOST1.
TN ignored the modified echo request packet.
Subtest No.2 PASS

Subtest Results
|1| option bit 000: option type is immutable | PASS |
|2| option bit 001: option type is immutable | PASS |
OK
15:30:34End

Packet Reverse Log