summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-07-15Improve logging of reserved labels.Renato Westphal
Print "exp-null" and "imp-null" instead of "0" and "3", for example. Also, remove print_label() and print_pw_type() from ldpctl.c and use the equivalent functions from ldpd's log.c. While here, be more paranoid and use UINT32_MAX instead of UINT_MAX for NO_LABEL.
2016-07-15Explicitly ignore the Hop Count and Path Vector TLVs.Renato Westphal
Since these are "well known" TLVs, we have to explicitly ignore them otherwise ldpd would send "Unknown TLV" Notification messages when it shouldn't. Fixes regression caused by rev1.51.
2016-07-15Update per-neighbor GTSM options on config reload.Renato Westphal
2016-07-13output the no-longer-so-new AS operators when printing theSebastian Benoit
configuration noticed by and diff from Denis Fondras, thanks! ok phessler@ sthen@
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupJoel Sing
changes - map the previous configuration to the equivalent in the new groups. This will be revisited post release. Discussed with beck@
2016-07-13Introduce RTF_MULTICAST and flag corresponding IPv6 routes as suchMartin Pieuchot
instead of abusing RTF_CLONING. Fix a leak reporeted by Aaron Riekenberg on misc@, ok sthen@
2016-07-12Document that the syslogd options -c and -k must be used together.Alexander Bluhm
OK jmc@
2016-07-12Add support for TLS client certificates in syslogd. This allows aAlexander Bluhm
remote server to verify that the log messages from our syslogd are authentic. From Kapetanakis Giannis; man page input jmc@; OK jung@ deraadt@
2016-07-11Teach tcpdump to recognize MPLS pseudowire with control words. AddedRafael Zalamena
support to print encapsulated ethernet packets as well. "Looks good" deraadt@
2016-07-09Prepare vionet to be handled asynchronously to the VCPU threadStefan Kempf
This splits the handling of received data into a separate function that can later be called in parallel to the VCPU thread instead of handling received packets on VCPU exits only. It also makes virtq accesses in the rx path safe to run in parallel to the VCPU thread: the last index into the 'avail' ring the driver has notified to the host is kept track of. It also makes sure that the host only writes back to the 'avail' ring instead of modifying the whole receive virtq. While there, describe what virtio_vq_info and virtio_io_cfg are used for, as suggested by mlarkin@ ok mlarkin@
2016-07-08When making a copy of svc_pollfd, use the correct size.Todd C. Miller
Also pass the correct fd count to svc_getreq_poll(). OK jca@
2016-07-08Return 0 on read from PIT control port. Intel explicitly says this is notMike Larkin
supported, and it looks like other emulators/hypervisors do a variety of different things here. Most return 0, but at least one might return random garbage. Returning 0 seems safest here, but leave a warning in place for the logs in case a guest VM does this.
2016-07-07Updated the ldpd.conf man page examplesRafael Zalamena
The man page already contains the definition of the new neighbor-addr and neighbor-id, but the examples were outdated. Now we may have an LSR-ID that is different from its address. ok renato@
2016-07-07sanity check vm create and run args earlierMike Larkin
2016-07-06Allow space-deliminated fields in syslog.conf in addition toTodd C. Miller
traditional tabs-deliminated fields. This is consistent with what FreeBSD, NetBSD and Linux do. Adapted from FreeBSD.
2016-07-06route6d spring cleanupJeremie Courreges-Anglas
Various tweaks and fixes: - nuke util.h, not needed since pidfile(3) went away - nuke the rrt_same member of struct riprt, "future use" since import - mark rtdexit as __dead - nuke progname handling - fix pid handling: cache the pid *after* calling daemon(3) - nuke setting rtm_pid. The kernel is responsible for setting this in routing messages. - nuke the useless myseq variable ok florian@ benno@ millert@ deraadt@ renato@
2016-07-06clarify a comment about memory regionsMike Larkin
2016-07-05Move to svc_getreq_poll/svc_pollfd.Jeremie Courreges-Anglas
Stop using select to avoid the weird workarounds for fd_set size. Also replace calloc with reallocarray. Prompted by a mail by Miod, cluebat from guenther@. ok millert@, prodding deraadt@
2016-07-05Build eeprom(8) on octeon.Visa Hankala
ok kettenis@ deraadt@ jasper@
2016-07-04limit each viornd request to 64KB.Mike Larkin
2016-07-03add -r option to enqueuer as compat interface for mailxGilles Chehade
diff by Richard <richard@aaazen.com>
2016-07-02check cache tree for collisions when inserting replies.Ted Unangst
if two identical requests are sent out, the first will create a cache entry. the second will not go into the cache tree, but will linger around, causing a crash when we free it and try to remove from the tree. instead, give up if insert fails. diagnosis and initial patch from Duncan.
2016-07-02remove misleading comment. it's not true anymore.Eric Faurot
ok gilles@
2016-07-02datain counter is part of the transaction stateEric Faurot
ok gilles@
2016-07-02set the msgid on the transactionEric Faurot
ok gilles@ jung@
2016-07-02do not uppercase "hop limit";Jason McIntyre
2016-07-01More renaming and whitespace cleanup.Renato Westphal
No binary change after "strip -s".
2016-07-01Be more compliant with RFC 4447.Renato Westphal
When sending a label withdraw during the pseudowire Control Word negotiation, append a "Wrong C-bit" status TLV after the FEC TLV (in conformance to RFC 4447 section 6.2). Apparently this has no use other than aiding in troubleshooting. Also, extend the recv_labelmessage() function to accept Status TLVs and ignore them instead of shutting down the session.
2016-07-01Several minor tweaks.Renato Westphal
2016-07-01Decrease the initialization FSM timeout.Renato Westphal
The previous value of 180 was just too long. If a neighbor get stuck in the initialization FSM for more than 15 seconds, then there's certainly something wrong and the session should be dropped. A potential case of a neighbor getting stuck in the initialization FSM is when both the local and the remote LSRs disable the LDPv4 GTSM negotiation and there's a mismatch in their GTSM configuration (one is enabled for GTSM while the other is not). In this case, a smaller timeout allows for a quicker recovery of the session when the configuration is fixed on either side.
2016-07-01Rename hello flags to keep consistent with the rest of the code.Renato Westphal
Flag constants should start with F_.
2016-07-01Add GTSM support (RFC 6720).Renato Westphal
This also finishes the missing bits from our RFC 7552 implementation because GTSM is mandatory for LDPv6. To avoid any kind of interoperability problems, I included a few knobs to enable/disable GTSM on a per-address-family and per-neighbor basis. Cisco's LDPv6 implementation, for instance, doesn't support GTSM. "reads good" claudio@
2016-07-01always refer to the helo string stored on the sessionEric Faurot
ok gilles@
2016-07-01flag the local socket listener as local.Eric Faurot
clarify check for local listeners. ok gilles@ millert@
2016-07-01Avoid printing f->f_lasttime and/or f->f_prevhost if they are empty.Todd C. Miller
This fixes a long-standing issue where syslogd would print 15 NUL bytes followed by two blank spaces before the log message for warnings generated while parsing syslog.conf. OK bluhm@
2016-07-01Include errno string in log message when we fail to open a file.Todd C. Miller
The privileged process sends the errno value back when it cannot open a file. OK gilles@
2016-06-30update aliases documentation to reflect realityGilles Chehade
2016-06-30Prevent NULL deref, pointed out by llvm's scan-build.Florian Obser
OK jca, millert
2016-06-30remove some unused variables (that were commented out anyway)Mike Larkin
2016-06-29Spring cleanupJeremie Courreges-Anglas
- pointless casts, kill caddr_t or replace it with char * - signed counters - simplify if_getmtu, only one method is needed and SIOCGIFMTU is the cheapest - we no longer have drivers for IFT_FDDI - hide details of iflist management - if (dflag) log_debug -> log_debug - dead code and comments - etc etc Input from and ok florian@
2016-06-29Explicitely enclose SMTP transactions between BEGIN and COMMIT/ROLLBACKEric Faurot
filter events. Bump filter API version. ok gilles@ jung@
2016-06-28whitespace nitJeremie Courreges-Anglas
2016-06-28oops, $pkg can be more than a pkgname. We have the right informationMarc Espie
in the plist, so use it instead.
2016-06-28Use IPV6_MINHOPCOUNT to finish implementing ttl-security for IPv6.Jeremie Courreges-Anglas
ok renato@ deraadt@
2016-06-28option -z that uses is-branch info to produce "complete"Marc Espie
stem--[flavor][%branch] listing. feedback and suggestions semarie@
2016-06-28document is-branchMarc Espie
2016-06-27Fix inverted logic in recv_hello().Renato Westphal
Bug introduced by rev1.48 two weeks ago. We were not respecting the advertised transport connection preference (LDPoIPv4 or LDPoIPv6), the fix is pretty obvious.
2016-06-27Remove superfluous call to l2vpn_pw_exit().Renato Westphal
2016-06-27Handle ibuf_add() errors.Renato Westphal
tweaks from claudio@
2016-06-27surprised nobody noticed before meMarc Espie
let scp:// work with PKG_CACHE basically, we do an extra fork, so we end up cleaning up the connection twice that's okay for the handles, but not for the commands, since we do a spurious ABORT BYE BYE on cleanup.