Closed jboddey closed 1 month ago
What issue is being addressed here? I'm not sure what this solves or if ICMP and DHCP can both be defined within the same packet.
What issue is being addressed here? I'm not sure what this solves or if ICMP and DHCP can both be defined within the same packet.
I've added some more detail and an image of an example packet capture.
The screen shot still indicates DHCP and ICMP as two separate packets and the code is expecting both protocols to be contained in the same packet, which I don't believe is possible.
Can you add a unit test around this specific failure?
I am going to wait until unit testing improvements are merged in from #611
In the event that a device has received a DHCP address from server 1, and still maintains communications with server 1, the device is allowed to reject messages from server 2. However, the DHCP snooping test checks the monitor.pcap for any packets not allowed. Currently, that test will report fail if the device has responded with an ICMP port unreachable to a DHCP ACK from server 2. Because the reject ICMP message includes the top part of the packet (which contains the DHCP ACK) this is picked up as a failure.