From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 7 Mar 2013 15:21:11 +0000 (+0100)
Subject: ipsec: Increased log level for message in case no outbound policy is found
X-Git-Tag: 5.0.3rc1~22
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c994ec3b70b733dc25d244eadeaef4ed56ebcff9;p=thirdparty%2Fstrongswan.git

ipsec: Increased log level for message in case no outbound policy is found

This might happen on Android if sockets are bound to the physical IP
address but packets are still routed via TUN device.  Since it seems to
happen quite often (or for stuff that requires regular traffic) this
hides these messages from the default log.
---

diff --git a/src/libipsec/ipsec_processor.c b/src/libipsec/ipsec_processor.c
index 66f43a4081..e142157f82 100644
--- a/src/libipsec/ipsec_processor.c
+++ b/src/libipsec/ipsec_processor.c
@@ -196,7 +196,7 @@ static job_requeue_t process_outbound(private_ipsec_processor_t *this)
 	policy = ipsec->policies->find_by_packet(ipsec->policies, packet, FALSE);
 	if (!policy)
 	{
-		DBG1(DBG_ESP, "no matching outbound IPsec policy for %H == %H",
+		DBG2(DBG_ESP, "no matching outbound IPsec policy for %H == %H",
 			 packet->get_source(packet), packet->get_destination(packet));
 		packet->destroy(packet);
 		return JOB_REQUEUE_DIRECT;