summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2005-05-31add -nv to SYNOPSIS;Jason McIntyre
2005-05-31tweaks;Jason McIntyre
2005-05-31minor tweaks;Jason McIntyre
2005-05-30Don't call va_start() when we do not log. From Andrey Matveev.Camiel Dobbelaar
2005-05-28Fix confusing typo.Esben Norby
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
failover gateways. ok mcbride@, "looks good" hshoexer@
2005-05-28support decapsulation of 802.11 data framesReyk Floeter
ok canacar@
2005-05-28Add sasyncd. deraadt@ okHakan Olsson
2005-05-28result not used; ok hoTheo de Raadt
2005-05-28Optionally prevent syncing failover node-node SA/SPD info (master side).Hakan Olsson
2005-05-27Update, also mention pfsync integrationHakan Olsson
2005-05-27Keep sockaddr in syncpeer struct.Hakan Olsson
2005-05-27do not allow nul in the control connection.Camiel Dobbelaar
ok beck
2005-05-27bah, more kaesefondue (debugging cruft left in)Henning Brauer
2005-05-27don't need to fetch the kernel routing twice, once for v4 and once for v6,Henning Brauer
do it once and handle both families. claudio ok
2005-05-27Implement SPD (IPsec flow) snapshots.Hakan Olsson
2005-05-27will throw claudio in a big pot of kaesefondue for repeated whitespace fuckupsHenning Brauer
2005-05-27kroute6 support, at least partially. Get it in so that Henning can clean itClaudio Jeker
up more. OK henning@
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
inserted the rule which causes the logging. secondly, the uid/pid of the process in case the logged packet is delivered to/from a local socket. a lookup of the local socket can be forced for logged packets with a new option, 'log (user)'. make tcpdump print the additional information when -e and -v is used. note: this changes the pflog header struct, rebuild all dependancies. ok bob@, henning@.
2005-05-27Add a flag for specifying the socket to open to talk to bgpd.Claudio Jeker
Needed for upcomming spamd madness. Requested and OK beck@
2005-05-27When the neighbor at the other end of the virtual link goes to stateEsben Norby
full, originate a new router LSA. ok claudio@
2005-05-27Set the V-bit when originating virtual links in router LSAs.Esben Norby
ok claudio@
2005-05-27Virtual link support, originate virtual links in router LSAs.Esben Norby
jajaja claudio@
2005-05-27Virtual link support.Esben Norby
ok claudio@
2005-05-27Virtual link support.Esben Norby
ok claudio@
2005-05-27Virtual link support.Esben Norby
ok claudio@
2005-05-27include sys/time.h to get struct timevalTodd C. Miller
2005-05-27include sys/time.h to get struct timevalTodd C. Miller
2005-05-27Fix a access after free on shutdown. OK norby@Claudio Jeker
2005-05-27Clearify.Esben Norby
2005-05-27Initial virtual link support.Esben Norby
ok claudio@
2005-05-27Nasty bug!Esben Norby
Found during the development of virtual link support. Personally I spend 3 hours chasing this, and I didn't find it. Claudio spend 2 hours and he found it, credit goes to him :-) It is wise to put the payload you just created onto the wire, instead of putting some freshly 0'ed bytes.... ok claudio@
2005-05-27Virtual link support.Esben Norby
ok claudio@
2005-05-27Preparations for virtual link support.Esben Norby
ok claudio@
2005-05-27Preparation for upcoming virtual link support.Esben Norby
ok claudio@
2005-05-27While calculating the routing table don't ignore all routes with a cost ofClaudio Jeker
LS_INFINITY. Summary LSA are not touched by the SPF algorithm and so they got dropped here because the still had a cost of LS_INFINITY. The calculated routing table starts to make sense now. OK norby@
2005-05-27Only checking if w->cost is non equal to LS_INFINITY and w->prev is NULL isClaudio Jeker
not enough to distinguish between calculated vertexes and those just queued in the candidate list. So add a additional check if the vertex is on the candidate list. This fixes a problem Stephen Marley reported some time ago. OK norby@
2005-05-27Small formatting bits in show neighbor detail.Esben Norby
ok claudio@
2005-05-27Fix nexthop calculation by setting w->prev before calling calc_next_hop().Claudio Jeker
OK norby@
2005-05-26Unnecessary ()Claudio Jeker
2005-05-26Remove annoying spf_calc debug line.Esben Norby
2005-05-26Remove route update debugging messages.Esben Norby
2005-05-26Disable cand_list_dump and spf_dump by default.Esben Norby
2005-05-26Enable ifstated in the builds. This still does not mean that ifstated isRyan Thomas McBride
necessary for regular carp setups. There are situations where you need this, but if you're going to use it, think hard about redesigning your network so you don't have to. ok deraadt@ mpf@ henning@
2005-05-26More usable debug output when originating router lsas.Esben Norby
2005-05-26Another unneeded debug message.Esben Norby
2005-05-26Unwanted.Esben Norby
2005-05-26Make interface election less verbose.Esben Norby
2005-05-26Remove unneeded debugging messages from rde imsg handling.Esben Norby
2005-05-26Remove unused event/action caption.Esben Norby