royhills / ike-scan

The IKE Scanner
GNU General Public License v3.0
364 stars 59 forks source link

Supplying nonsense transformation parameters lacks a "not supported feedback" #38

Open drwetter opened 2 years ago

drwetter commented 2 years ago

Hi,

while finding the right transformation to check on our VPN I wasn't able to find out whether certain algos were supported. As the docu is lagging behind I wasn't quite sure.

So I thought on unsupported parameters the tool will complain. But it pretty much looks like it does not:

prompt> ike-scan --nat-t --trans=9/257,111,220,1000   <IP_ADDRESS>
Starting ike-scan 1.9.5 with 1 hosts (http://www.nta-monitor.com/tools/ike-scan/
<IP_ADDRESS> Notify message 14 (NO-PROPOSAL-CHOSEN) HDR=(CKY-R=726042a52ba99238)

Ending ike-scan 1.9.5: 1 hosts scanned in 0.030 seconds (33.82 hosts/sec).  0 returned handshake; 1 returned notify
prompt>

Context: #37