summaryrefslogtreecommitdiff
path: root/sys/net/if_pflog.c
AgeCommit message (Expand)Author
2016-04-29Make if_output() return EAFNOSUPPORT instead of just dropping packetsKenneth R Westerback
2015-12-05remove old lint annotationsTed Unangst
2015-11-10flush the send queue in start routines with IFQ_PURGE.David Gwynne
2015-08-25#if INET && INET6 -> #ifdef INET6, the kernel no longer defines INETJonathan Gray
2015-07-15m_freem() can handle NULL, do not check for this condition beforehands.Theo de Raadt
2015-02-13Include sys/stdint.h for SIZE_MAX instead of relying on the misplacedTodd C. Miller
2015-02-12change log(matches) semantics slightly to make it more useful. since itHenning Brauer
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-12-02replace some malloc multiplies with mallocarry. ok deraadt henningTed Unangst
2014-09-08When logging a packet to a listener on the pflog0 interface, theAlexander Bluhm
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2014-07-09tedu bpf_mtap_pflog().Henning Brauer
2014-06-25pf_translate doesn't use the mbuf argument anymore.Mike Belopuhov
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-03-26Remove various read-only *maxlen variables and use IFQ_MAXLEN directly.Martin Pieuchot
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-07-08there was a limit on the number of pflog interfaces - 16. remove that.Henning Brauer
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-27If some length checks in pflog_bpfcopy() failed, the functionAlexander Bluhm
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2011-12-21don't attempt to run pf_translate on fragments: it will fail miserably.Mike Belopuhov
2011-10-21strengthen some checks to prevent m_copy* routines from operatingMike Belopuhov
2011-10-13Since the IPv6 madness is not enough introduce NAT64 -- which is actuallyClaudio Jeker
2011-09-28As requested by henning, move the mbuf pointer into struct pf_pdesc.Alexander Bluhm
2011-09-20Put kif and dir into pdesc an use this instead of passing the valuesAlexander Bluhm
2011-09-19Consolidate pf function parameters. Move off and hdrlen into pdescAlexander Bluhm
2011-09-18Move the pdesc initialization code into pf_setup_pdesc(). UnifyAlexander Bluhm
2011-09-18Move the call to pf_test_rule() for fragments that have not beenAlexander Bluhm
2011-07-07Fold pf_test_fragment() into pf_test_rule(), reduce code and fixesRyan Thomas McBride
2011-07-06cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhmHenning Brauer
2011-07-05Explicitly reserve space for special ICMP6 headers in pf_hdrs, likeAlexander Bluhm
2011-06-20More cleanup in pf_test/pf_test6 this time mostly the fragmentClaudio Jeker
2011-05-22Do not pass AF specific information to pf_test_rule() and PFLOG_PACKET()Claudio Jeker
2010-12-07remove a bunch of unused argumentsJonathan Gray
2010-09-21Don't dereference null pointers for protocols without port numbers.Stuart Henderson
2010-09-21assert copyrights / bump yearsHenning Brauer
2010-09-21stuff the original (before rewriting) addresses into the already existantHenning Brauer
2010-09-21pflog overhaulHenning Brauer
2010-01-12Remove bpfdetach() call right in front of the if_detach() call sinceClaudio Jeker
2007-12-20return with ENOTTY instead of EINVAL for unknown ioctl requests.Brad Smith
2007-10-18There is no point for IP addresses on pflog(4)Marco Pfatschbacher
2007-09-16another M_ZERO diff.Pierre-Yves Ritschard