Test Information

Title	Detect modification of IPv6 header IP src address with AH
CommandLine	./HTR_A_In_DM_IPv6H_src.seq -pkt ./HTR_A_DM_IPv6H.def -log 13.html -ti Detect modification of IPv6 header IP src address with AH
TestVersion
ToolVersion	undefined
Start	2002/03/27 18:51:48
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./HTR_A_DM_IPv6H.def
System	usagi-i386
TargetName	Red Hat Linux release 7.2 (Enigma) + usagi cvs 2002/03/26 20:00
HostName	usagi.tahi.org
Type	host

Test Sequence Execution Log

18:51:48	Start
	* Target initialization phase * Target: Clear all SAD and SPD entries
18:51:48	vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecClearAll.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 '' Connected. [root@usagi root]# [root@usagi root]# /usr/local/v6/bin/pfkey -F any [root@usagi root]# echo $? 16 [root@usagi ro~. Disconnected.
	Target: Set SAD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF
18:51:52	vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSAD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF '' Connected. [root@usagi root]# [root@usagi root]# /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ff ff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 --auth h mac-md5 --authkey 0x54414849544553543839414243444546 [root@usagi root]# sendMessagesSync: never got /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 --auth hmac-md5 --authkey 0x54414849544553543839414243444546 ~. Disconnected.
	Target: Set SPD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" upperspec=any direction=in protocol=ah mode=transport
18:52:32	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSPD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" upperspec=any direction=in protocol=ah mode=transport '' Connected. level is specified. I ignore it [root@usagi root]# [root@usagi root]# /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:f f05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 [root@usagi root]# sendMessagesSync: never got /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 [root@usagi root]# /usr/local/v6/bin/pfkey -L SADB: ----------------------------------------------- sa:cebce000 state: 1 sport:0 src:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128 dport:0 dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128 pxy: proto:0 ipsec_proto:2 spi:0x1000 state:1 refcnt:1 auth:2 esp:0 lifetime c:0 0 (byte), 0 1567 (add), 0 0 (use) lifetime s:0 0 (byte), 0 0 (add), 0 0 (use) lifetime h:0 0 (byte), 0 0 (add), 0 0 (use) ----------------------------------------------- SPD: --------------------------------------------- src:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128 sport:0 dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128 dport:0 proto:0 policy:0 sa(ah):00000000 dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128 ipsec_proto:2 spi:0xffffffff --------------------------------------------- [root@usagi root]# echo $? 1 ~. Disconnected.
	* Target testing phase *
18:53:12	Start Capturing Packets (Link0)
18:53:12	vSend(Link0,echo_request_from_host1_ah) send echo_request_from_host1_ah
18:53:12	vRecv(Link0,ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0 recv echo_reply_to_host1
18:53:12	vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0 recv ns_to_router
18:53:17	vSend(Link0,na_from_router) send na_from_router
	NC about Router was PROBE state, but now it's REACHABLE.
18:53:17	vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0 vRecv() return status=1
18:53:24	vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0 vRecv() return status=1
	TN received echo reply from NUT to HOST1.
18:53:30	vSend(Link0,echo_request_from_host1_ah_dm_ipv6h_src) send echo_request_from_host1_ah_dm_ipv6h_src
18:53:30	vRecv(Link0,ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0 vRecv() return status=1
	TN received no echo reply from NUT to HOST1. TN ignored the modified echo request packet. OK
18:53:36	End

Packet Reverse Log

send echo_request_from_host1_ah at 18:53:12

Frame_Ether                     (length:94)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 0:e0:18:a8:ab:de
| | SourceAddress                    = 0:0:0:0:a0:a0
| | Type                             = 34525
| Packet_IPv6                     (length:80)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 40
| | | NextHeader                       = 51
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:ff05:200:ff:fe00:c1c1
| | | DestinationAddress               = 3ffe:501:ffff:ff03:200:ff:fe00:b0b0
| | Hdr_AH                          (length:24)
| | | NextHeader                       = 58
| | | PayloadLength                    = 4
| | | Reserved                         = 0
| | | SPI                              = 4096
| | | SequenceNumber                   = 1
| | | algorithm                        = aalgo_hmacmd5_012
| | | ICV                              = 6f16e15e 95931158  a9c48041 calc(6f16e15e 95931158  a9c48041)
| | ICMPv6_EchoRequest              (length:16)
| | | Type                             = 128
| | | Code                             = 0
| | | Checksum                         = 7333 calc(7333)
| | | Identifier                       = 0
| | | SequenceNumber                   = 0
| | | Payload                         (length:8)
| | | | data                             = 4563686f 44617461

Recv at 18:53:12

Frame_Ether                     (length:70)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 0:0:0:0:a0:a0
| | SourceAddress                    = 0:e0:18:a8:ab:de
| | Type                             = 34525
| Packet_IPv6                     (length:56)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 16
| | | NextHeader                       = 58
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:ff03:200:ff:fe00:b0b0
| | | DestinationAddress               = 3ffe:501:ffff:ff05:200:ff:fe00:c1c1
| | ICMPv6_EchoReply                (length:16)
| | | Type                             = 129
| | | Code                             = 0
| | | Checksum                         = 7077 calc(7077)
| | | Identifier                       = 0
| | | SequenceNumber                   = 0
| | | Payload                         (length:8)
| | | | data                             = 4563686f 44617461
===ns_to_router=================================
ng compare _HDR_IPV6_ns_to_router.HopLimit received:64 = 255
ng compare _HDR_IPV6_ns_to_router.DestinationAddress received:3ffe:501:ffff:ff05:200:ff:fe00:c1c1 = oneof(v6("3ffe:501:ffff:ff03:200:ff:fe00:a0a0"),v6merge("FF02:0:0:0:0:1:FF00:0000",104,v6("3ffe:501:ffff:ff03:200:ff:fe00:a0a0")))
ng meta Packet_IPv6.ICMPv6_NS != Packet_IPv6.ICMPv6_EchoReply
===echo_reply_to_host1=================================

Recv at 18:53:17

Frame_Ether                     (length:86)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 0:0:0:0:a0:a0
| | SourceAddress                    = 0:e0:18:a8:ab:de
| | Type                             = 34525
| Packet_IPv6                     (length:72)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 32
| | | NextHeader                       = 58
| | | HopLimit                         = 255
| | | SourceAddress                    = fe80::2e0:18ff:fea8:abde
| | | DestinationAddress               = 3ffe:501:ffff:ff03:200:ff:fe00:a0a0
| | ICMPv6_NS                       (length:32)
| | | Type                             = 135
| | | Code                             = 0
| | | Checksum                         = 8718 calc(8718)
| | | Reserved                         = 0
| | | TargetAddress                    = 3ffe:501:ffff:ff03:200:ff:fe00:a0a0
| | | Opt_ICMPv6_SLL                  (length:8)
| | | | Type                             = 1
| | | | Length                           = 1
| | | | LinkLayerAddress                 = 0:e0:18:a8:ab:de
===ns_to_router=================================

send na_from_router at 18:53:17

Frame_Ether                     (length:86)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 0:e0:18:a8:ab:de
| | SourceAddress                    = 0:0:0:0:a0:a0
| | Type                             = 34525
| Packet_IPv6                     (length:72)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 32
| | | NextHeader                       = 58
| | | HopLimit                         = 255
| | | SourceAddress                    = 3ffe:501:ffff:ff03:200:ff:fe00:a0a0
| | | DestinationAddress               = 3ffe:501:ffff:ff03:200:ff:fe00:b0b0
| | ICMPv6_NA                       (length:32)
| | | Type                             = 136
| | | Code                             = 0
| | | Checksum                         = 13319 calc(13319)
| | | RFlag                            = 1
| | | SFlag                            = 1
| | | OFlag                            = 1
| | | Reserved                         = 0
| | | TargetAddress                    = 3ffe:501:ffff:ff03:200:ff:fe00:a0a0
| | | Opt_ICMPv6_TLL                  (length:8)
| | | | Type                             = 2
| | | | Length                           = 1
| | | | LinkLayerAddress                 = 0:0:0:0:a0:a0

send echo_request_from_host1_ah_dm_ipv6h_src at 18:53:30

Frame_Ether                     (length:94)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 0:e0:18:a8:ab:de
| | SourceAddress                    = 0:0:0:0:a0:a0
| | Type                             = 34525
| Packet_IPv6                     (length:80)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 40
| | | NextHeader                       = 51
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:ff05:200:ff:fe00:c1c1
| | | DestinationAddress               = 3ffe:501:ffff:ff03:200:ff:fe00:b0b0
| | Hdr_AH                          (length:24)
| | | NextHeader                       = 58
| | | PayloadLength                    = 4
| | | Reserved                         = 0
| | | SPI                              = 4096
| | | SequenceNumber                   = 3
| | | ICV                              =  calc()
| | | Padding                          = 2beb02f7 85c62b69  7fa3e29e
| | ICMPv6_EchoRequest              (length:16)
| | | Type                             = 128
| | | Code                             = 0
| | | Checksum                         = 41123 calc(7333)
| | | Identifier                       = 0
| | | SequenceNumber                   = 0
| | | Payload                         (length:8)
| | | | data                             = 4563686f 44617461