summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2008-11-07Replace the number of bits to shift with EVL_PRIO_BITS in theBrad Smith
EVL_PRIOFTAG macro. ok naddy@
2008-11-06Introduced IPv6 support of uniform model for TTL handling.Michele Marchetto
OK claudio@ laurent@
2008-11-04Move the trunk port count check from trunk_lb_start() to trunk_start()Brad Smith
before the protocol start routine is called so as to cover all protocols with the same check. ok mpf@
2008-11-01Introduced Uniform Model for TTL handling.Michele Marchetto
MPLS TTL is mapped into network layer one as the packet exits the LSP. Just IPv4 support for now. Added the relevant sysctls to enable this behaviour. Input and OK claudio@
2008-10-30Fix building with !INET6 kernels.Brad Smith
2008-10-28Always skip "urpf-failed" test for IPv6 link local addresses.Marco Pfatschbacher
We could re-embed the scope-id before we do the route lookup, but then we would just find the very interface we've received the packet on anyway. OK markus@, claudio@, henning@
2008-10-28add support for multiple pflow(4) interfacesJoerg Goltermann
OK: claudio@ henning@
2008-10-28Remove return at the end of a void function.Brad Smith
2008-10-28In trunk_media_status() mark the interface as active if any ports areBrad Smith
active rather than just the primary being UP. From FreeBSD Ok mpf@
2008-10-28In trunk_lb_start() port % count will never be greater thanBrad Smith
TRUNK_MAX_PORTS so nuke the test. From FreeBSD Ok mpf@
2008-10-28Feed IPv6 flow label to hash calculation.Brad Smith
From FreeBSD Ok mpf@
2008-10-28Show the ACTIVE flag in ifconfig for the single interface that isBrad Smith
actually active in failover mode rather than all interfaces with a link. This makes it clear if the master interface is in use or one of the backup links. From FreeBSD Tested by jmc@ Ok mpf@
2008-10-28Added mpls_output() used to output mpls packets originating from local host.Michele Marchetto
Strictly similar to mpls_input(). Input and OK claudio@, OK laurent@
2008-10-24Allow the debug printf code which is trying to retreive the interfaceBrad Smith
pointer to get at the interface name by pointing to the correct struct.
2008-10-23use the correct idiom for NFOO things which come from "foo.h" filesTheo de Raadt
ok dlg
2008-10-22#if INET => #ifdef INETMarco Pfatschbacher
#if INET6 => #ifdef INET6
2008-10-21add bpf/tcpdump support to pflow(4)Joerg Goltermann
ok canacar@ henning@
2008-10-18Prevent the user to assign reserved labels to mpe(4) interfaces.Michele Marchetto
OK claudio@
2008-10-16Switch the existing TX VLAN hardware support over to having theChristian Weisgerber
tag in the header. Convert TX tagging in the drivers. Help and ok brad@
2008-10-16* Allow ether_input() and vlan_input() to handle incoming packetsChristian Weisgerber
where the tag is stored in the mbuf header. * Make bridge(4) handle interfaces with and without hardware tag support and forward packets inbetween. Help and ok claudio@
2008-10-16Drop promiscuously received packets if the vlan interface is not inChristian Weisgerber
promiscuous mode itself. Closes PR 5012. With claudio@. ok claudio@, henning@
2008-10-16Make the session id unique per receiving interface so that pppoeCan Erkin Acar
interfaces attached to different networks can use the same session id. reported by gm_sjo <saqmaster at gmail dot com>
2008-10-15Second pass of simple timeout_add -> timeout_add_sec conversionsBret Lambert
This should take care of the simpler ones (i.e., timeout values of integer multiples of hz). ok krw@, art@
2008-10-14Now mpls_input() handles ipv4 and ipv6 explicit null labels.Michele Marchetto
Added mpe_input6 to manage also ipv6 packets insted of just ipv4 ones. OK claudio@ laurent@
2008-10-12Some more cleanup. No binary change.Marco Pfatschbacher
OK reyk@
2008-10-11Make sure no two pppoe devices share the same sc_unique identifier. WhileMiod Vallat
there, fix some typos, and pass M_CANFAIL to all malloc() calls which use M_WAITOK but are tested for failure. test&ok brad@
2008-10-09Add fallback ioctl handlers for MTU and multicast to ether_ioctl().Brad Smith
2008-10-08Get rid of the second table entry pool (pfr_kentry_pl2); we're alreadyRyan Thomas McBride
using the default interrupt handler for both, so there's no need to keep table entries created in interrupt context separate. ok henning art
2008-10-02First step towards cleaning up the Ethernet driver ioctl handling.Brad Smith
Move calling ether_ioctl() from the top of the ioctl function, which at the moment does absolutely nothing, to the default switch case. Thus allowing drivers to define their own ioctl handlers and then falling back on ether_ioctl(). The only functional change this results in at the moment is having all Ethernet drivers returning the proper errno of ENOTTY instead of EINVAL/ENXIO when encountering unknown ioctl's. Shrinks the i386 kernels by.. RAMDISK - 1024 bytes RAMDISKB - 1120 bytes RAMDISKC - 832 bytes Tested by martin@/jsing@/todd@/brad@ Build tested on almost all archs by todd@/brad@ ok jsing@
2008-10-02When redirect is used with sticky-address and a matching pass rule usesJoel Sing
reply-to, the sticky-address in the source tracking pool is overwritten with the reply-to address, resulting in new connections being incorrectly redirected to the reply-to host (instead of the sticky-address host). Prevent this by passing a NULL source node reference to pf_map_addr() when looking up the reply-to host, thus preventing the NAT source node from being overwritten. ok mcbride@ henning@
2008-10-01Don't timeout_del() if we're going to do a timeout_add() right away.Michael Knudsen
ok claudio
2008-09-28Ansify function declarations for gif(4).Joel Sing
ok claudio@
2008-09-28Teach PF pf_print_state_parts() about IPv4 in IP and IPv6 in IPJoel Sing
encapsulation. Decapitalise the 'v' in ICMPv6 whilst here. ok henning@
2008-09-22Reorder PFSTATE_PFLOW define:Marco Pfatschbacher
It applies to state_flags, not to sync_flags. OK henning@, gollo@
2008-09-17Solve m_free problem with a not correctly configured pflow interfaceJoerg Goltermann
leading to a kernel crash reported in PR5930 OK claudio@ henning@
2008-09-17fix whitespacesJoerg Goltermann
ok henning@
2008-09-17remove dead stores and newly created unused variables.Charles Longeau
fix potential use of uninitialized value in trunk_port_ioctl() function. Found by LLVM/Clang Static Analyzer. ok mpf@ henning@
2008-09-16netstat statistics for pflow(4) via pseudo familyJoerg Goltermann
ok cluadio@ henning@
2008-09-16fix whitespace/tab typosJoerg Goltermann
ok henning@ claudio@
2008-09-15Add RTP_MASK and RTP_DOWN needed for upcomming link state tracking.Claudio Jeker
2008-09-10Convert timeout_add() calls using multiples of hz to timeout_add_sec()Bret Lambert
Really just the low-hanging fruit of (hopefully) forthcoming timeout conversions. ok art@, krw@
2008-09-10re-enable the state key linking. i believe the bugs that hit us shortlyHenning Brauer
before release are fixed, and the extra check i added prevents incorrect linking if there are still cases with tunnels, tho none of the testers saw these yet, except for an icmp case that will be fixed shortly. the extra check prevents misbehavior there. if you see 'pf: state key linking mismatch' messages please report them to me along with ifconfig -A and mention if you do any routing or nat tricks. ok deraadt
2008-09-09welcome pflow(4), a netflow v5 compatible flow export interface.Henning Brauer
flows export data gathered from pf states. initial implementation by Joerg Goltermann <jg@osn.de>, guidance and many changes by me. 'put it in' theo
2008-09-03before linking state keys compare them to verify they actually are theHenning Brauer
exact reverse of each other. if there is a mismatch don't erstablish the link and print enough so that we should be able to find the culprit.
2008-09-02remove dead stores and newly created unused variables.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok henning@ mpf@
2008-08-28some style fixes.Brad Smith
2008-08-28Fix a typo in the naming of the PPPoE input queues, ppoe -> pppoe.Brad Smith
ok canacar@
2008-08-28encode the speed and link state in the local port key.Reyk Floeter
ok brad@
2008-08-27Fix length check when parsing PPPoE discovery phase packets.Brad Smith
Malicious PPPoE discovery packets could cause the kernel to crash. From canacar@ and inspired by the original fix from NetBSD. ok canacar@
2008-08-26introduce a function to be called when addressing information has changed,Henning Brauer
pf_pkt_addr_changed. atm just clears the state key pointer. calling this is cleaner than having other parts of the stack clearing pointers in the pf part of the mbuf packet header directly.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 17:28:17 +0000