summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2018-02-07 05:48:48 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2018-02-07 05:48:48 +0000
commit50867ee0a3c8aeff157dbd0c856239abd037e54a (patch)
tree0a77405407315592f76755f51145d81ba68a26aa /sys/net/pfvar.h
parentc869944cd57f0acbb6fa8e5de12f46afc1e97659 (diff)
provide counters for # of synfloods detected, # of syncookies sent,
# of syncookies successfuly validated, ok phessler
Diffstat (limited to 'sys/net/pfvar.h')
-rw-r--r--sys/net/pfvar.h10
1 files changed, 8 insertions, 2 deletions
diff --git a/sys/net/pfvar.h b/sys/net/pfvar.h
index 8cade49569a..a62e7e2b860 100644
--- a/sys/net/pfvar.h
+++ b/sys/net/pfvar.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: pfvar.h,v 1.471 2018/02/06 23:44:48 henning Exp $ */
+/* $OpenBSD: pfvar.h,v 1.472 2018/02/07 05:48:47 henning Exp $ */
/*
* Copyright (c) 2001 Daniel Hartmeier
@@ -1222,7 +1222,10 @@ enum pfi_kif_refs {
#define LCNT_SRCCONNRATE 4 /* max-src-conn-rate */
#define LCNT_OVERLOAD_TABLE 5 /* entry added to overload table */
#define LCNT_OVERLOAD_FLUSH 6 /* state entries flushed */
-#define LCNT_MAX 7 /* total+1 */
+#define LCNT_SYNFLOODS 7 /* synfloods detected */
+#define LCNT_SYNCOOKIES_SENT 8 /* syncookies sent */
+#define LCNT_SYNCOOKIES_VALID 9 /* syncookies validated */
+#define LCNT_MAX 10 /* total+1 */
#define LCNT_NAMES { \
"max states per rule", \
@@ -1232,6 +1235,9 @@ enum pfi_kif_refs {
"max-src-conn-rate", \
"overload table insertion", \
"overload flush states", \
+ "synfloods detected", \
+ "syncookies sent", \
+ "syncookies validated", \
NULL \
}