diff options
| author | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2013-06-09 22:03:07 +0000 |
|---|---|---|
| committer | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2013-06-09 22:03:07 +0000 |
| commit | 80d641b141f400d2697c55e7420e673e2911ebcb (patch) | |
| tree | f37603e02ad799cfdc2c3ab299e1e29a0155175b | |
| parent | 1be119c17b95692a2d3d1de4bebf65ecdb9f59e6 (diff) | |
Increment udpstat.udps_nosec and tcpstat.tcps_rcvnosec in case packet is
dropped by IPsec security policy.
input from and ok mikeb
| -rw-r--r-- | sys/netinet/tcp_input.c | 3 | ||||
| -rw-r--r-- | sys/netinet/udp_usrreq.c | 3 |
2 files changed, 4 insertions, 2 deletions
diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c index bd15f9971a4..825ea996b62 100644 --- a/sys/netinet/tcp_input.c +++ b/sys/netinet/tcp_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tcp_input.c,v 1.262 2013/06/03 16:57:05 bluhm Exp $ */ +/* $OpenBSD: tcp_input.c,v 1.263 2013/06/09 22:03:06 yasuoka Exp $ */ /* $NetBSD: tcp_input.c,v 1.23 1996/02/13 23:43:44 christos Exp $ */ /* @@ -896,6 +896,7 @@ findpcb: ipsp_spd_lookup(m, af, iphlen, &error, IPSP_DIRECTION_IN, tdb, inp, 0); if (error) { + tcpstat.tcps_rcvnosec++; splx(s); goto drop; } diff --git a/sys/netinet/udp_usrreq.c b/sys/netinet/udp_usrreq.c index 2d2f68a468b..2b5623f1430 100644 --- a/sys/netinet/udp_usrreq.c +++ b/sys/netinet/udp_usrreq.c @@ -1,4 +1,4 @@ -/* $OpenBSD: udp_usrreq.c,v 1.163 2013/06/01 16:22:05 bluhm Exp $ */ +/* $OpenBSD: udp_usrreq.c,v 1.164 2013/06/09 22:03:06 yasuoka Exp $ */ /* $NetBSD: udp_usrreq.c,v 1.28 1996/03/16 23:54:03 christos Exp $ */ /* @@ -610,6 +610,7 @@ udp_input(struct mbuf *m, ...) ipsp_spd_lookup(m, srcsa.sa.sa_family, iphlen, &error, IPSP_DIRECTION_IN, tdb, inp, 0); if (error) { + udpstat.udps_nosec++; splx(s); goto bad; } |