[server] added --pcap-any-direction along with config file support
authorMichael Rash <mbr@cipherdyne.org>
Tue, 7 May 2013 02:23:59 +0000 (22:23 -0400)
committerMichael Rash <mbr@cipherdyne.org>
Tue, 7 May 2013 02:23:59 +0000 (22:23 -0400)
commit8f423e8b89915b0b1c6ae37b9d505d37f2c18315
treeede5a697b469b13d1ce44aaecac325b8f330e0ef
parent5aac3d978c8eadb81b10a055d176a950994f91ac
[server] added --pcap-any-direction along with config file support

From the config file comments:

This variable controls whether fwknopd is permitted to sniff SPA packets
regardless of whether they are received on the sniffing interface or sent
from the sniffing interface.  In the later case, this can be useful to have
fwknopd sniff SPA packets that are forwarded through a system and destined
for a different network.  If the sniffing interface is the egress interface
for such packets, then this variable will need to be set to "Y" in order for
fwknopd to see them.  The default is "N" so that fwknopd only looks for SPA
packets that are received on the sniffin

PCAP_ANY_DIRECTION         N;
server/cmd_opts.h
server/config_init.c
server/fwknopd.conf
server/fwknopd_common.h
server/pcap_capture.c
test/test-fwknop.pl