Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: [patch] wireguard floods dmesg
To:
Jay <mysidia@gmail.com>
Cc:
Lloyd <ng2d68@proton.me>, Claudio Jeker <cjeker@diehard.n-r-g.com>, "tech@openbsd.org" <tech@openbsd.org>
Date:
Thu, 12 Dec 2024 19:02:01 +0000

Download raw body.

Thread
On 2024/12/12 12:50, Jay wrote:
> On Wed, Dec 11, 2024 at 9:55 PM Lloyd <ng2d68@proton.me> wrote:
> 
> > This didn't make sense, so I looked at the Linux implementation of Wireguard. Under Linux, the debugging messages contain more information such as IP addresses of the remote endpoint that triggered the error. It appears when Wireguard was ported to OpenBSD, these were intentionally removed.
> >..
> > Should this functionality be added/restored?
> 
> I would suggest that information be restored to the log messages.   It
> seems to be an important feature that got lost (log message content
> that could be analyzed for debugging or security monitoring purposes).

IIRC it wasn't ported, it was a separate implementation.

Also IIRC the data structures used in this implementation make it
a bit hard to get at some of the information that would be useful
for loggin.