summaryrefslogtreecommitdiff
path: root/sys/net/if_pflog.c
AgeCommit message (Expand)Author
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-03-26Remove various read-only *maxlen variables and use IFQ_MAXLEN directly.Martin Pieuchot
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-07-08there was a limit on the number of pflog interfaces - 16. remove that.Henning Brauer
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-27If some length checks in pflog_bpfcopy() failed, the functionAlexander Bluhm
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2011-12-21don't attempt to run pf_translate on fragments: it will fail miserably.Mike Belopuhov
2011-10-21strengthen some checks to prevent m_copy* routines from operatingMike Belopuhov
2011-10-13Since the IPv6 madness is not enough introduce NAT64 -- which is actuallyClaudio Jeker
2011-09-28As requested by henning, move the mbuf pointer into struct pf_pdesc.Alexander Bluhm
2011-09-20Put kif and dir into pdesc an use this instead of passing the valuesAlexander Bluhm
2011-09-19Consolidate pf function parameters. Move off and hdrlen into pdescAlexander Bluhm
2011-09-18Move the pdesc initialization code into pf_setup_pdesc(). UnifyAlexander Bluhm
2011-09-18Move the call to pf_test_rule() for fragments that have not beenAlexander Bluhm
2011-07-07Fold pf_test_fragment() into pf_test_rule(), reduce code and fixesRyan Thomas McBride
2011-07-06cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhmHenning Brauer
2011-07-05Explicitly reserve space for special ICMP6 headers in pf_hdrs, likeAlexander Bluhm
2011-06-20More cleanup in pf_test/pf_test6 this time mostly the fragmentClaudio Jeker
2011-05-22Do not pass AF specific information to pf_test_rule() and PFLOG_PACKET()Claudio Jeker
2010-12-07remove a bunch of unused argumentsJonathan Gray
2010-09-21Don't dereference null pointers for protocols without port numbers.Stuart Henderson
2010-09-21assert copyrights / bump yearsHenning Brauer
2010-09-21stuff the original (before rewriting) addresses into the already existantHenning Brauer
2010-09-21pflog overhaulHenning Brauer
2010-01-12Remove bpfdetach() call right in front of the if_detach() call sinceClaudio Jeker
2007-12-20return with ENOTTY instead of EINVAL for unknown ioctl requests.Brad Smith
2007-10-18There is no point for IP addresses on pflog(4)Marco Pfatschbacher
2007-09-16another M_ZERO diff.Pierre-Yves Ritschard
2007-05-26one extern seems to be better than 20 for ifqmaxlen; ok krwJason Wright
2007-03-19no longer create a pflog0 by default.Henning Brauer
2006-12-15make pflog(4) count; ok hennig@ deraadt@Otto Moerbeek
2006-11-01Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends onRyan Thomas McBride
2006-10-25add a "u_int8_t logif" to struct pfrule to select to which pflog interfaceHenning Brauer
2006-10-23make the pflog interface clonable.Henning Brauer
2006-06-28Another unused function bites the dust -- this time pflogrtrequest(). OK markus@Claudio Jeker
2006-03-25allow bpf(4) to ignore packets based on their direction (inbound orDamien Miller
2006-03-04With the exception of two other small uncommited diffs this movesBrad Smith
2005-07-31Introduce bpf_mtap_af and bpf_mtap_hdr to be used when passing a mbuf chainChristopher Pascoe
2005-05-27pass UID_MAX/NO_PID when the socket lookup failed, so tcpdump canDaniel Hartmeier
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-10-01Fix stack leak into pfloghdr (the pad field is not initialized),Can Erkin Acar
2003-05-14Use official (from pcap people) link type for pflog.Can Erkin Acar
2003-05-03string fixes; tedu okTheo de Raadt