4527b28baf
When done with tests check that both the per-VNET and the global-fragmented- packets-in-system counters are zero to make sure we do not leak counters or queue entries. This implies that for all test cases we either have to check for the ICMPv6 packet sent in case of TLL=0 expiry (if it is sent) or sleep at least long enough for the TTL to expire for all packets (e.g., fragments where we do not have the off=0 packet). This also means that statistics are now updated to include all the expired packets. There are cases when we do not check for counters to be zero and this is when testing VNET teardown to behave properly and not panic, when we are intentionally leaving fragments in the system. MFC after: 3 weeks Sponsored by: Netflix
123 lines
3.8 KiB
Python
123 lines
3.8 KiB
Python
#!/usr/bin/env python
|
|
#-
|
|
# SPDX-License-Identifier: BSD-2-Clause
|
|
#
|
|
# Copyright (c) 2019 Netflix, Inc.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
# 1. Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# 2. Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in the
|
|
# documentation and/or other materials provided with the distribution.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
# SUCH DAMAGE.
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
import argparse
|
|
import scapy.all as sp
|
|
import socket
|
|
import sys
|
|
from time import sleep
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser("frag6.py",
|
|
description="IPv6 fragementation test tool")
|
|
parser.add_argument('--sendif', nargs=1,
|
|
required=True,
|
|
help='The interface through which the packet will be sent')
|
|
parser.add_argument('--recvif', nargs=1,
|
|
required=True,
|
|
help='The interface on which to check for the packet')
|
|
parser.add_argument('--src', nargs=1,
|
|
required=True,
|
|
help='The source IP address')
|
|
parser.add_argument('--to', nargs=1,
|
|
required=True,
|
|
help='The destination IP address')
|
|
parser.add_argument('--debug',
|
|
required=False, action='store_true',
|
|
help='Enable test debugging')
|
|
|
|
args = parser.parse_args()
|
|
|
|
|
|
########################################################################
|
|
#
|
|
# Two fragments with different ECN (Traffic Clas) bits to trigger
|
|
# error cases.
|
|
#
|
|
# A: Reassembly failure.
|
|
# R: ip6f02 dropped / Timeout (not waiting for).
|
|
#
|
|
data = "6" * 8
|
|
# IPTOS_ECN_NOTECT
|
|
ip6f01 = \
|
|
sp.Ether() / \
|
|
sp.IPv6(src=args.src[0], dst=args.to[0], tc=0x00) / \
|
|
sp.IPv6ExtHdrFragment(offset=0, m=1, id=13) / \
|
|
sp.UDP(dport=3456, sport=6543) / \
|
|
data
|
|
# IPTOS_ECN_CE
|
|
ip6f02 = \
|
|
sp.Ether() / \
|
|
sp.IPv6(src=args.src[0], dst=args.to[0], tc=0x03) / \
|
|
sp.IPv6ExtHdrFragment(offset=16, m=0, id=13) / \
|
|
sp.UDP(dport=3456, sport=6543) / \
|
|
data
|
|
if args.debug :
|
|
ip6f01.display()
|
|
ip6f02.display()
|
|
sp.sendp(ip6f01, iface=args.sendif[0], verbose=False)
|
|
sp.sendp(ip6f02, iface=args.sendif[0], verbose=False)
|
|
|
|
|
|
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ##
|
|
#
|
|
# Two fragments with different ECN (Traffic Clas) bits to trigger
|
|
# error cases.
|
|
#
|
|
# A: Reassembly failure.
|
|
# R: ip6f02 dropped / Timeout (not waiting for).
|
|
#
|
|
# IPTOS_ECN_ECT1
|
|
ip6f01 = \
|
|
sp.Ether() / \
|
|
sp.IPv6(src=args.src[0], dst=args.to[0], tc=0x01) / \
|
|
sp.IPv6ExtHdrFragment(offset=0, m=1, id=0x1301) / \
|
|
sp.UDP(dport=3456, sport=6543) / \
|
|
data
|
|
# IPTOS_ECN_NOTECT
|
|
ip6f02 = \
|
|
sp.Ether() / \
|
|
sp.IPv6(src=args.src[0], dst=args.to[0], tc=0x00) / \
|
|
sp.IPv6ExtHdrFragment(offset=16, m=0, id=0x1301) / \
|
|
sp.UDP(dport=3456, sport=6543) / \
|
|
data
|
|
if args.debug :
|
|
ip6f01.display()
|
|
ip6f02.display()
|
|
sp.sendp(ip6f01, iface=args.sendif[0], verbose=False)
|
|
sp.sendp(ip6f02, iface=args.sendif[0], verbose=False)
|
|
|
|
# Wait for expiry.
|
|
sleep(75)
|
|
sys.exit(0)
|
|
|
|
if __name__ == '__main__':
|
|
main()
|