diff options
author | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2017-02-07 18:18:17 +0000 |
---|---|---|
committer | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2017-02-07 18:18:17 +0000 |
commit | 05f3dca89fa5efb05cb505f36f6fd86d294bf974 (patch) | |
tree | 1f0d8d688ea325857b21abc08e3850feb0ea3526 /sys/netinet/ip_ipcomp.h | |
parent | 7db541e2bea9889d4866f7688c0b8ac8b7f114b0 (diff) |
IPsec packets could be dropped unaccounted if output after crypto
failed. Add a counter for that case.
OK dhill@
Diffstat (limited to 'sys/netinet/ip_ipcomp.h')
-rw-r--r-- | sys/netinet/ip_ipcomp.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/netinet/ip_ipcomp.h b/sys/netinet/ip_ipcomp.h index 76596ebdadd..0ebd45d2edc 100644 --- a/sys/netinet/ip_ipcomp.h +++ b/sys/netinet/ip_ipcomp.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ip_ipcomp.h,v 1.7 2007/12/14 18:33:41 deraadt Exp $ */ +/* $OpenBSD: ip_ipcomp.h,v 1.8 2017/02/07 18:18:16 bluhm Exp $ */ /* * Copyright (c) 2001 Jean-Jacques Bernard-Gundol (jj@wabbitt.org) @@ -51,6 +51,7 @@ struct ipcompstat { u_int32_t ipcomps_pdrops; /* Packet blocked due to policy */ u_int32_t ipcomps_crypto; /* "Crypto" processing failure */ u_int32_t ipcomps_minlen; /* packets too short for compress */ + u_int32_t ipcomps_outfail; /* Packet output failure */ }; /* IPCOMP header */ |