Log IP addresses for discarded inbound IPsec packets
authorTobias Brunner <tobias@strongswan.org>
Mon, 15 Oct 2012 09:19:34 +0000 (11:19 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 16 Oct 2012 12:16:17 +0000 (14:16 +0200)
src/libipsec/ipsec_processor.c

index a91d9e0..353f0e7 100644 (file)
@@ -146,7 +146,9 @@ static job_requeue_t process_inbound(private_ipsec_processor_t *this)
                                policy->destroy(policy);
                                break;
                        }
-                       DBG1(DBG_ESP, "discarding inbound IP packet due to policy");
+                       DBG1(DBG_ESP, "discarding inbound IP packet %H == %H due to "
+                                "policy", ip_packet->get_source(ip_packet),
+                                ip_packet->get_destination(ip_packet));
                        /* no matching policy found, fall-through */
                }
                case IPPROTO_NONE: