The second try a committing the bluetooth code

Has been seen to work on several cards and communicating with
several mobile phones to use them as modems etc.

We are still talking with 3com to try get them to allow us to include
the firmware for their pccard in the driver but the driver is here..
In the mean time
it can be downloaded from the 3com website and loaded using the utility
bt3cfw(8) (supplied) (instructions in the man page)

Not yet linked to the build

Submitted by:	Maksim Yevmenkin <myevmenk@exodus.net>
Approved by:	re

9 files changed, 3477 insertions, 0 deletions

diff --git a/sys/netgraph/bluetooth/include/ng_bluetooth.h b/sys/netgraph/bluetooth/include/ng_bluetooth.h
new file mode 100644
index 0000000..238da42
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_bluetooth.h
@@ -0,0 +1,232 @@
+/*
+ * bluetooth.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_bluetooth.h,v 1.1.1.1 2002/09/04 21:47:41 max Exp $
+ * $FreeBSD$
+ */
+
+#ifndef _NETGRAPH_BLUETOOTH_H_
+#define _NETGRAPH_BLUETOOTH_H_ 1
+
+/*
+ * Version of the stack
+ */
+
+#define NG_BLUETOOTH_VERSION	1
+
+/*
+ * Declare the base of the Bluetooth sysctl hierarchy, 
+ * but only if this file cares about sysctl's
+ */
+
+#ifdef SYSCTL_DECL
+SYSCTL_DECL(_net_bluetooth);
+SYSCTL_DECL(_net_bluetooth_hci);
+SYSCTL_DECL(_net_bluetooth_l2cap);
+#endif /* SYSCTL_DECL */
+
+/*
+ * Mbuf qeueue and useful mbufq macros. We do not use ifqueue because we
+ * do not need mutex and other locking stuff
+ */
+
+struct mbuf;
+
+struct ng_bt_mbufq {
+	struct mbuf	*head;   /* first item in the queue */
+	struct mbuf	*tail;   /* last item in the queue */
+	u_int32_t	 len;    /* number of items in the queue */
+	u_int32_t	 maxlen; /* maximal number of items in the queue */
+	u_int32_t	 drops;	 /* number if dropped items */
+};
+typedef struct ng_bt_mbufq	ng_bt_mbufq_t;
+typedef struct ng_bt_mbufq *	ng_bt_mbufq_p;
+
+#define NG_BT_MBUFQ_INIT(q, _maxlen)			\
+	do {						\
+		(q)->head = NULL;			\
+		(q)->tail = NULL;			\
+		(q)->len = 0;				\
+		(q)->maxlen = (_maxlen);		\
+		(q)->drops = 0;				\
+	} while (0)
+
+#define NG_BT_MBUFQ_DESTROY(q)				\
+	do {						\
+		NG_BT_MBUFQ_DRAIN((q));			\
+	} while (0)
+
+#define NG_BT_MBUFQ_FIRST(q)	(q)->head
+
+#define NG_BT_MBUFQ_LEN(q)	(q)->len
+
+#define NG_BT_MBUFQ_FULL(q)	(q)->len >= (q)->maxlen
+
+#define NG_BT_MBUFQ_DROP(q)	(q)->drops ++
+
+#define NG_BT_MBUFQ_ENQUEUE(q, i)			\
+	do {						\
+		(i)->m_nextpkt = NULL;			\
+							\
+		if ((q)->tail == NULL)			\
+			(q)->head = (i);		\
+		else					\
+			(q)->tail->m_nextpkt = (i);	\
+							\
+		(q)->tail = (i);			\
+		(q)->len ++;				\
+	} while (0)
+
+#define NG_BT_MBUFQ_DEQUEUE(q, i)			\
+	do {						\
+		(i) = (q)->head;			\
+		if ((i) != NULL) {			\
+			(q)->head = (q)->head->m_nextpkt; \
+			if ((q)->head == NULL)		\
+				(q)->tail = NULL;	\
+							\
+			(q)->len --;			\
+			(i)->m_nextpkt = NULL;		\
+		} 					\
+	} while (0)
+
+#define NG_BT_MBUFQ_PREPEND(q, i)			\
+	do {						\
+		(i)->m_nextpkt = (q)->head;		\
+		if ((q)->tail == NULL)			\
+			(q)->tail = (i);		\
+							\
+		(q)->head = (i);			\
+		(q)->len ++;				\
+	} while (0)
+
+#define NG_BT_MBUFQ_DRAIN(q)				\
+	do { 						\
+        	struct mbuf	*m = NULL;		\
+							\
+		for (;;) { 				\
+			NG_BT_MBUFQ_DEQUEUE((q), m);	\
+			if (m == NULL) 			\
+				break; 			\
+							\
+			NG_FREE_M(m);	 		\
+		} 					\
+	} while (0)
+
+/* 
+ * Netgraph item queue and useful itemq macros
+ */
+
+struct ng_item;
+
+struct ng_bt_itemq {
+	struct ng_item	*head;   /* first item in the queue */
+	struct ng_item	*tail;   /* last item in the queue */
+	u_int32_t	 len;    /* number of items in the queue */
+	u_int32_t	 maxlen; /* maximal number of items in the queue */
+	u_int32_t	 drops;  /* number if dropped items */
+};
+typedef struct ng_bt_itemq	ng_bt_itemq_t;
+typedef struct ng_bt_itemq *	ng_bt_itemq_p;
+
+#define NG_BT_ITEMQ_INIT(q, _maxlen)	NG_BT_MBUFQ_INIT((q), (_maxlen))
+
+#define NG_BT_ITEMQ_DESTROY(q)				\
+	do {						\
+		NG_BT_ITEMQ_DRAIN((q));			\
+	} while (0)
+
+#define NG_BT_ITEMQ_FIRST(q)	NG_BT_MBUFQ_FIRST((q))
+
+#define NG_BT_ITEMQ_LEN(q)	NG_BT_MBUFQ_LEN((q))
+
+#define NG_BT_ITEMQ_FULL(q)	NG_BT_MBUFQ_FULL((q))
+
+#define NG_BT_ITEMQ_DROP(q)	NG_BT_MBUFQ_DROP((q))
+
+#define NG_BT_ITEMQ_ENQUEUE(q, i)			\
+	do {						\
+		(i)->el_next = NULL;			\
+							\
+		if ((q)->tail == NULL)			\
+			(q)->head = (i);		\
+		else					\
+			(q)->tail->el_next = (i);	\
+							\
+		(q)->tail = (i);			\
+		(q)->len ++;				\
+	} while (0)
+
+#define NG_BT_ITEMQ_DEQUEUE(q, i)			\
+	do {						\
+		(i) = (q)->head;			\
+		if ((i) != NULL) {			\
+			(q)->head = (q)->head->el_next;	\
+			if ((q)->head == NULL)		\
+				(q)->tail = NULL;	\
+							\
+			(q)->len --;			\
+			(i)->el_next = NULL;		\
+		} 					\
+	} while (0)
+
+#define NG_BT_ITEMQ_PREPEND(q, i)			\
+	do {						\
+		(i)->el_next = (q)->head;		\
+		if ((q)->tail == NULL)			\
+			(q)->tail = (i);		\
+							\
+		(q)->head = (i);			\
+		(q)->len ++;				\
+	} while (0)
+
+#define NG_BT_ITEMQ_DRAIN(q)				\
+	do { 						\
+        	struct ng_item	*i = NULL;		\
+							\
+		for (;;) { 				\
+			NG_BT_ITEMQ_DEQUEUE((q), i);	\
+			if (i == NULL) 			\
+				break; 			\
+							\
+			NG_FREE_ITEM(i); 		\
+		} 					\
+	} while (0)
+
+/*
+ * Get Bluetooth stack sysctl globals
+ */
+
+u_int32_t	bluetooth_hci_command_timeout	(void);
+u_int32_t	bluetooth_hci_connect_timeout	(void);
+u_int32_t	bluetooth_hci_watchdog_timeout	(void);
+u_int32_t	bluetooth_hci_max_neighbor_age	(void);
+u_int32_t	bluetooth_l2cap_rtx_timeout	(void);
+u_int32_t	bluetooth_l2cap_ertx_timeout	(void);
+
+#endif /* _NETGRAPH_BLUETOOTH_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_bt3c.h b/sys/netgraph/bluetooth/include/ng_bt3c.h
new file mode 100644
index 0000000..6030b81
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_bt3c.h
@@ -0,0 +1,114 @@
+/*
+ * ng_bt3c.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_bt3c.h,v 1.2 2002/11/12 00:51:45 max Exp $
+ * $FreeBSD$
+ *
+ * XXX XXX XX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX 
+ *
+ * Based on information obrained from: Jose Orlando Pereira <jop@di.uminho.pt>
+ * and disassembled w2k driver.
+ *
+ * XXX XXX XX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX XXX 
+ *
+ */
+
+#ifndef _NG_BT3C_H_
+#define _NG_BT3C_H_
+
+/* XXX FIME: does not belong here. Move to pccarddevs.h later */
+#define PCMCIA_PRODUCT_3COM_3CRWB609	0x0040
+#define PCMCIA_STR_3COM_3CRWB609	"3Com Bluetooth PC Card 3CRWB60-A"
+#define PCMCIA_CIS_3COM_3CRWB609	{ NULL, NULL, NULL, NULL }
+
+/**************************************************************************
+ **************************************************************************
+ **     Netgraph node hook name, type name and type cookie and commands 
+ **************************************************************************  
+ **************************************************************************/
+
+#define NG_BT3C_NODE_TYPE	"btccc"	/* XXX can't use bt3c in pccard.conf */
+#define NG_BT3C_HOOK		"hook"
+
+#define NGM_BT3C_COOKIE		1014752016
+
+/* Debug levels */
+#define NG_BT3C_ALERT_LEVEL	1
+#define NG_BT3C_ERR_LEVEL	2
+#define NG_BT3C_WARN_LEVEL	3
+#define NG_BT3C_INFO_LEVEL	4
+
+/* Node states */
+#define NG_BT3C_W4_PKT_IND	1               /* wait for packet indicator */
+#define NG_BT3C_W4_PKT_HDR	2               /* wait for packet header */
+#define NG_BT3C_W4_PKT_DATA	3               /* wait for packet data */
+
+/**************************************************************************
+ **************************************************************************
+ **                    BT3C node command/event parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NGM_BT3C_NODE_GET_STATE	1		/* get node state */
+typedef u_int16_t		ng_bt3c_node_state_ep;
+
+#define NGM_BT3C_NODE_SET_DEBUG	2		/* set debug level */
+#define NGM_BT3C_NODE_GET_DEBUG	3		/* get debug level */
+typedef u_int16_t		ng_bt3c_node_debug_ep; 
+
+#define NGM_BT3C_NODE_GET_QLEN	4		/* get queue length */
+#define NGM_BT3C_NODE_SET_QLEN	5		/* set queue length */
+typedef struct {
+	int32_t	queue;				/* queue index */
+#define NGM_BT3C_NODE_IN_QUEUE	1		/* incoming queue */
+#define NGM_BT3C_NODE_OUT_QUEUE	2		/* outgoing queue */
+
+	int32_t	qlen;				/* queue length */
+} ng_bt3c_node_qlen_ep;
+
+#define NGM_BT3C_NODE_GET_STAT	6		/* get statistic */
+typedef struct {
+	u_int32_t	pckts_recv;		/* # of packets received */
+	u_int32_t	bytes_recv;		/* # of bytes received */
+	u_int32_t	pckts_sent;		/* # of packets sent */
+	u_int32_t	bytes_sent;		/* # of bytes sent */
+	u_int32_t	oerrors;		/* # of output errors */
+	u_int32_t	ierrors;		/* # of input errors */
+} ng_bt3c_node_stat_ep;
+
+#define NGM_BT3C_NODE_RESET_STAT 7		/* reset statistic */
+
+#define NGM_BT3C_NODE_DOWNLOAD_FIRMWARE	8	/* download firmware */
+
+typedef struct {
+	u_int32_t	block_address;
+	u_int16_t	block_size;		/* in words */
+	u_int16_t	block_alignment;	/* in bytes */
+} ng_bt3c_firmware_block_ep;
+
+#endif /* ndef _NG_BT3C_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_btsocket.h b/sys/netgraph/bluetooth/include/ng_btsocket.h
new file mode 100644
index 0000000..5ace3fa
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_btsocket.h
@@ -0,0 +1,319 @@
+/*
+ * ng_btsocket.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_btsocket.h,v 1.7 2002/11/12 22:31:39 max Exp $
+ * $FreeBSD$
+ */
+
+#ifndef _NETGRAPH_BTSOCKET_H_
+#define _NETGRAPH_BTSOCKET_H_ 1
+
+/*
+ * XXX FIXME: does not belong here, move to sys/socket.h later and fix AF_MAX
+ */
+
+#define AF_BLUETOOTH	36		/* Address family */
+#define PF_BLUETOOTH	AF_BLUETOOTH	/* Protocol family */
+
+/*
+ * XXX FIXME: does not belong here, move to other places later
+ */
+
+#define BLUETOOTH_PROTO_HCI	134	/* HCI protocol number */
+#define BLUETOOTH_PROTO_L2CAP	135	/* L2CAP protocol number */
+
+/*
+ * XXX FIXME: probably does not belong here
+ * Bluetooth version of struct sockaddr for raw HCI sockets
+ */
+
+struct sockaddr_hci {
+	u_char		hci_len;	/* total length */
+	u_char		hci_family;	/* address family */
+	char		hci_node[16];	/* address (size == NG_NODELEN  + 1) */
+};
+
+/* Raw HCI socket options */
+#define SOL_HCI_RAW		0x0802	/* socket options level */
+
+#define SO_HCI_RAW_FILTER	1	/* get/set filter on socket */
+#define SO_HCI_RAW_DIRECTION	2	/* turn on/off direction info */
+#define SCM_HCI_RAW_DIRECTION	SO_HCI_RAW_DIRECTION /* cmsg_type  */
+
+/*
+ * Raw HCI socket filter.
+ *
+ * For packet mask use (1 << (HCI packet indicator - 1))
+ * For event mask use (1 << (Event - 1))
+ */
+
+struct ng_btsocket_hci_raw_filter {
+	bitstr_t	bit_decl(packet_mask, 32);
+	bitstr_t	bit_decl(event_mask, (NG_HCI_EVENT_MASK_SIZE * 8));
+};
+
+/*
+ * Raw HCI sockets ioctl's
+ */
+
+/* Get state */
+struct ng_btsocket_hci_raw_node_state {
+	char			hci_node[16];
+	ng_hci_node_state_ep	state;
+};
+#define SIOC_HCI_RAW_NODE_GET_STATE \
+	_IOWR('b', NGM_HCI_NODE_GET_STATE, \
+		struct ng_btsocket_hci_raw_node_state)
+
+/* Initialize */
+struct ng_btsocket_hci_raw_node_init {
+	char	hci_node[16];
+};
+#define SIOC_HCI_RAW_NODE_INIT \
+	_IOWR('b', NGM_HCI_NODE_INIT, \
+		struct ng_btsocket_hci_raw_node_init)
+
+/* Get/Set debug level */
+struct ng_btsocket_hci_raw_node_debug {
+	char			hci_node[16];
+	ng_hci_node_debug_ep	debug;
+};
+#define SIOC_HCI_RAW_NODE_GET_DEBUG \
+	_IOWR('b', NGM_HCI_NODE_GET_DEBUG, \
+		struct ng_btsocket_hci_raw_node_debug)
+#define SIOC_HCI_RAW_NODE_SET_DEBUG \
+	_IOWR('b', NGM_HCI_NODE_SET_DEBUG, \
+		struct ng_btsocket_hci_raw_node_debug)
+
+/* Get buffer info */
+struct ng_btsocket_hci_raw_node_buffer {
+	char			hci_node[16];
+	ng_hci_node_buffer_ep	buffer;
+};
+#define SIOC_HCI_RAW_NODE_GET_BUFFER \
+	_IOWR('b', NGM_HCI_NODE_GET_BUFFER, \
+		struct ng_btsocket_hci_raw_node_buffer)
+
+/* Get BD_ADDR */
+struct ng_btsocket_hci_raw_node_bdaddr {
+	char		hci_node[16];
+	bdaddr_t	bdaddr;
+};
+#define SIOC_HCI_RAW_NODE_GET_BDADDR \
+	_IOWR('b', NGM_HCI_NODE_GET_BDADDR, \
+		struct ng_btsocket_hci_raw_node_bdaddr)
+
+/* Get features */
+struct ng_btsocket_hci_raw_node_features {
+	char		hci_node [16];
+	u_int8_t	features[NG_HCI_FEATURES_SIZE];
+};
+#define SIOC_HCI_RAW_NODE_GET_FEATURES \
+	_IOWR('b', NGM_HCI_NODE_GET_FEATURES, \
+		struct ng_btsocket_hci_raw_node_features)
+
+/* Get stat */
+struct ng_btsocket_hci_raw_node_stat {
+	char			hci_node[16];
+	ng_hci_node_stat_ep	stat;
+};
+#define SIOC_HCI_RAW_NODE_GET_STAT \
+	_IOWR('b', NGM_HCI_NODE_GET_STAT, \
+		struct ng_btsocket_hci_raw_node_stat)
+
+/* Reset stat */
+struct ng_btsocket_hci_raw_node_reset_stat {
+	char	hci_node[16];
+};
+#define SIOC_HCI_RAW_NODE_RESET_STAT \
+	_IOWR('b', NGM_HCI_NODE_RESET_STAT, \
+		struct ng_btsocket_hci_raw_node_reset_stat)
+
+/* Flush neighbor cache */
+struct ng_btsocket_hci_raw_node_flush_neighbor_cache {
+	char	hci_node[16];
+};
+#define SIOC_HCI_RAW_NODE_FLUSH_NEIGHBOR_CACHE \
+	_IOWR('b', NGM_HCI_NODE_FLUSH_NEIGHBOR_CACHE, \
+		struct ng_btsocket_hci_raw_node_flush_neighbor_cache)
+
+/* Get neighbor cache */
+struct ng_btsocket_hci_raw_node_neighbor_cache {
+	char					 hci_node[16];
+	u_int32_t				 num_entries;
+	ng_hci_node_neighbor_cache_entry_ep	*entries;
+};
+#define SIOC_HCI_RAW_NODE_GET_NEIGHBOR_CACHE \
+	_IOWR('b', NGM_HCI_NODE_GET_NEIGHBOR_CACHE, \
+		struct ng_btsocket_hci_raw_node_neighbor_cache)
+
+/* Get connection list */
+struct ng_btsocket_hci_raw_con_list {
+	char			 hci_node[16];
+	u_int32_t		 num_connections;
+	ng_hci_node_con_ep	*connections;
+};
+#define SIOC_HCI_RAW_NODE_GET_CON_LIST \
+	_IOWR('b', NGM_HCI_NODE_GET_CON_LIST, \
+		struct ng_btsocket_hci_raw_con_list)
+
+/* Get/Set link policy settings mask */
+struct ng_btsocket_hci_raw_node_link_policy_mask {
+	char				hci_node[16];
+	ng_hci_node_link_policy_mask_ep	policy_mask;
+};
+#define SIOC_HCI_RAW_NODE_GET_LINK_POLICY_MASK \
+	_IOWR('b', NGM_HCI_NODE_GET_LINK_POLICY_SETTINGS_MASK, \
+		struct ng_btsocket_hci_raw_node_link_policy_mask)
+#define SIOC_HCI_RAW_NODE_SET_LINK_POLICY_MASK \
+	_IOWR('b', NGM_HCI_NODE_SET_LINK_POLICY_SETTINGS_MASK, \
+		struct ng_btsocket_hci_raw_node_link_policy_mask)
+
+/* Get/Set packet mask */
+struct ng_btsocket_hci_raw_node_packet_mask {
+	char				hci_node[16];
+	ng_hci_node_packet_mask_ep	packet_mask;
+};
+#define SIOC_HCI_RAW_NODE_GET_PACKET_MASK \
+	_IOWR('b', NGM_HCI_NODE_GET_PACKET_MASK, \
+		struct ng_btsocket_hci_raw_node_packet_mask)
+#define SIOC_HCI_RAW_NODE_SET_PACKET_MASK \
+	_IOWR('b', NGM_HCI_NODE_SET_PACKET_MASK, \
+		struct ng_btsocket_hci_raw_node_packet_mask)
+
+/*
+ * XXX FIXME: probably does not belong here
+ * Bluetooth version of struct sockaddr for L2CAP sockets (RAW and SEQPACKET)
+ */
+
+struct sockaddr_l2cap {
+	u_char		l2cap_len;	/* total length */
+	u_char		l2cap_family;	/* address family */
+	u_int16_t	l2cap_psm;	/* PSM (Protocol/Service Multiplexor) */
+	bdaddr_t	l2cap_bdaddr;	/* address */
+};
+
+/* L2CAP socket options */
+#define SOL_L2CAP		0x1609	/* socket option level */
+
+#define SO_L2CAP_IMTU		1	/* get/set incoming MTU */
+#define SO_L2CAP_OMTU		2	/* get outgoing (peer incoming) MTU */
+#define SO_L2CAP_IFLOW		3	/* get incoming flow spec. */
+#define SO_L2CAP_OFLOW		4	/* get/set outgoing flow spec. */
+#define SO_L2CAP_FLUSH		5	/* get/set flush timeout */
+
+/*
+ * Raw L2CAP sockets ioctl's
+ */
+
+/* Ping */
+struct ng_btsocket_l2cap_raw_ping {
+	bdaddr_t		 bdaddr[2];
+#define echo_src		 bdaddr[0]
+#define echo_dst		 bdaddr[1]
+	u_int32_t		 result;
+	u_int32_t		 echo_size;
+	u_int8_t		*echo_data;
+};
+#define SIOC_L2CAP_L2CA_PING \
+	_IOWR('b', NGM_L2CAP_L2CA_PING, \
+		struct ng_btsocket_l2cap_raw_ping)
+
+/* Get info */
+struct ng_btsocket_l2cap_raw_get_info {
+	bdaddr_t		 bdaddr[2];
+#define info_src		 bdaddr[0]
+#define info_dst		 bdaddr[1]
+	u_int32_t		 result;
+	u_int32_t		 info_type;
+	u_int32_t		 info_size;
+	u_int8_t		*info_data;
+};
+#define SIOC_L2CAP_L2CA_GET_INFO \
+	_IOWR('b', NGM_L2CAP_L2CA_GET_INFO, \
+		struct ng_btsocket_l2cap_raw_get_info)
+
+/* Get flags */
+struct ng_btsocket_l2cap_raw_node_flags {
+	bdaddr_t		src;
+	ng_l2cap_node_flags_ep	flags;
+};
+#define SIOC_L2CAP_NODE_GET_FLAGS \
+	_IOWR('b', NGM_L2CAP_NODE_GET_FLAGS, \
+		struct ng_btsocket_l2cap_raw_node_flags)
+
+/* Get/Set debug level */
+struct ng_btsocket_l2cap_raw_node_debug {
+	bdaddr_t		src;
+	ng_l2cap_node_debug_ep	debug;
+};
+#define SIOC_L2CAP_NODE_GET_DEBUG \
+	_IOWR('b', NGM_L2CAP_NODE_GET_DEBUG, \
+		struct ng_btsocket_l2cap_raw_node_debug)
+#define SIOC_L2CAP_NODE_SET_DEBUG \
+	_IOWR('b', NGM_L2CAP_NODE_SET_DEBUG, \
+		struct ng_btsocket_l2cap_raw_node_debug)
+
+/* Get connection list */
+struct ng_btsocket_l2cap_raw_con_list {
+	bdaddr_t		 src;
+	u_int32_t		 num_connections;
+	ng_l2cap_node_con_ep	*connections;
+};
+#define SIOC_L2CAP_NODE_GET_CON_LIST \
+	_IOWR('b', NGM_L2CAP_NODE_GET_CON_LIST, \
+		struct ng_btsocket_l2cap_raw_con_list)
+
+/* Get channel list */
+struct ng_btsocket_l2cap_raw_chan_list {
+	bdaddr_t		 src;
+	u_int32_t		 num_channels;
+	ng_l2cap_node_chan_ep	*channels;
+};
+#define SIOC_L2CAP_NODE_GET_CHAN_LIST \
+	_IOWR('b', NGM_L2CAP_NODE_GET_CHAN_LIST, \
+		struct ng_btsocket_l2cap_raw_chan_list)
+
+/* 
+ * Netgraph node type name and cookie 
+ */
+
+#define	NG_BTSOCKET_HCI_RAW_NODE_TYPE	"btsock_hci_raw"
+#define	NG_BTSOCKET_L2CAP_RAW_NODE_TYPE	"btsock_l2c_raw"
+#define	NG_BTSOCKET_L2CAP_NODE_TYPE	"btsock_l2c"
+
+/*
+ * Debug levels 
+ */
+
+#define NG_BTSOCKET_ALERT_LEVEL	1
+#define NG_BTSOCKET_ERR_LEVEL	2
+#define NG_BTSOCKET_WARN_LEVEL	3
+#define NG_BTSOCKET_INFO_LEVEL	4
+
+#endif /* _NETGRAPH_BTSOCKET_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_btsocket_hci_raw.h b/sys/netgraph/bluetooth/include/ng_btsocket_hci_raw.h
new file mode 100644
index 0000000..399e8ac
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_btsocket_hci_raw.h
@@ -0,0 +1,85 @@
+/*
+ * ng_btsocket_hci_raw.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_btsocket_hci_raw.h,v 1.2 2002/09/16 19:46:02 max Exp $
+ * $FreeBSD$
+ */
+
+#ifndef _NETGRAPH_BTSOCKET_HCI_RAW_H_
+#define _NETGRAPH_BTSOCKET_HCI_RAW_H_ 1
+
+#define NG_BTSOCKET_HCI_RAW_SENDSPACE	(4 * 1024)
+#define NG_BTSOCKET_HCI_RAW_RECVSPACE	(4 * 1024)
+
+/*
+ * Bluetooth raw HCI socket PCB
+ */
+
+struct ng_btsocket_hci_raw_pcb {
+	struct socket				*so;     /* socket */
+	int					 flags;  /* flags */
+#define NG_BTSOCKET_HCI_RAW_DIRECTION	(1 << 0)
+	struct sockaddr_hci			 addr;   /* local address */
+	struct ng_btsocket_hci_raw_filter	 filter; /* filter */
+	u_int32_t				 token;  /* message token */
+	struct ng_mesg				*msg;    /* message */
+	LIST_ENTRY(ng_btsocket_hci_raw_pcb)	 next;   /* link to next */
+};
+typedef struct ng_btsocket_hci_raw_pcb		ng_btsocket_hci_raw_pcb_t;
+typedef struct ng_btsocket_hci_raw_pcb *	ng_btsocket_hci_raw_pcb_p;
+
+#define	so2hci_raw_pcb(so) \
+	((struct ng_btsocket_hci_raw_pcb *)((so)->so_pcb))
+
+/*
+ * Bluetooth raw HCI socket methods
+ */
+
+#ifdef _KERNEL
+
+void ng_btsocket_hci_raw_init       (void);
+int  ng_btsocket_hci_raw_abort      (struct socket *);
+int  ng_btsocket_hci_raw_attach     (struct socket *, int, struct thread *);
+int  ng_btsocket_hci_raw_bind       (struct socket *, struct sockaddr *, 
+                                     struct thread *);
+int  ng_btsocket_hci_raw_connect    (struct socket *, struct sockaddr *, 
+                                     struct thread *);
+int  ng_btsocket_hci_raw_control    (struct socket *, u_long, caddr_t,
+                                     struct ifnet *, struct thread *);
+int  ng_btsocket_hci_raw_ctloutput  (struct socket *, struct sockopt *);
+int  ng_btsocket_hci_raw_detach     (struct socket *);
+int  ng_btsocket_hci_raw_disconnect (struct socket *);
+int  ng_btsocket_hci_raw_peeraddr   (struct socket *, struct sockaddr **);
+int  ng_btsocket_hci_raw_send       (struct socket *, int, struct mbuf *,
+                                     struct sockaddr *, struct mbuf *,
+                                     struct thread *);
+int  ng_btsocket_hci_raw_sockaddr   (struct socket *, struct sockaddr **);
+
+#endif /* _KERNEL */
+ 
+#endif /* ndef _NETGRAPH_BTSOCKET_HCI_RAW_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_btsocket_l2cap.h b/sys/netgraph/bluetooth/include/ng_btsocket_l2cap.h
new file mode 100644
index 0000000..cfae52e
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_btsocket_l2cap.h
@@ -0,0 +1,200 @@
+/*
+ * ng_btsocket_l2cap.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_btsocket_l2cap.h,v 1.3 2002/09/22 18:23:31 max Exp $
+ * $FreeBSD$
+ */
+
+#ifndef _NETGRAPH_BTSOCKET_L2CAP_H_
+#define _NETGRAPH_BTSOCKET_L2CAP_H_ 1
+
+/*
+ * L2CAP routing entry
+ */
+
+struct ng_hook;
+struct ng_message;
+
+struct ng_btsocket_l2cap_rtentry {
+	bdaddr_t				 src;  /* source BD_ADDR */
+	struct ng_hook				*hook; /* downstream hook */
+	LIST_ENTRY(ng_btsocket_l2cap_rtentry)	 next; /* linkt to next */
+};
+typedef struct ng_btsocket_l2cap_rtentry	ng_btsocket_l2cap_rtentry_t;
+typedef struct ng_btsocket_l2cap_rtentry *	ng_btsocket_l2cap_rtentry_p;
+
+/*****************************************************************************
+ *****************************************************************************
+ **                          SOCK_RAW L2CAP sockets                         **
+ *****************************************************************************
+ *****************************************************************************/
+
+#define NG_BTSOCKET_L2CAP_RAW_SENDSPACE	NG_L2CAP_MTU_DEFAULT
+#define NG_BTSOCKET_L2CAP_RAW_RECVSPACE	NG_L2CAP_MTU_DEFAULT
+
+/*
+ * Bluetooth raw L2CAP socket PCB
+ */
+
+struct ng_btsocket_l2cap_raw_pcb {
+	struct socket				*so;	/* socket */
+
+	bdaddr_t				 src;	/* source address */
+	ng_btsocket_l2cap_rtentry_p		 rt;    /* routing info */
+
+	u_int32_t				 token;	/* message token */
+	struct ng_mesg				*msg;   /* message */
+
+	LIST_ENTRY(ng_btsocket_l2cap_raw_pcb)	 next;  /* link to next PCB */
+};
+typedef struct ng_btsocket_l2cap_raw_pcb	ng_btsocket_l2cap_raw_pcb_t;
+typedef struct ng_btsocket_l2cap_raw_pcb *	ng_btsocket_l2cap_raw_pcb_p;
+
+#define	so2l2cap_raw_pcb(so) \
+	((struct ng_btsocket_l2cap_raw_pcb *)((so)->so_pcb))
+
+/*
+ * Bluetooth raw L2CAP socket methods
+ */
+
+#ifdef _KERNEL
+
+void ng_btsocket_l2cap_raw_init       (void);
+int  ng_btsocket_l2cap_raw_abort      (struct socket *);
+int  ng_btsocket_l2cap_raw_attach     (struct socket *, int, struct thread *);
+int  ng_btsocket_l2cap_raw_bind       (struct socket *, struct sockaddr *,
+                                       struct thread *);
+int  ng_btsocket_l2cap_raw_connect    (struct socket *, struct sockaddr *,
+                                       struct thread *);
+int  ng_btsocket_l2cap_raw_control    (struct socket *, u_long, caddr_t,
+                                       struct ifnet *, struct thread *);
+int  ng_btsocket_l2cap_raw_detach     (struct socket *);
+int  ng_btsocket_l2cap_raw_disconnect (struct socket *);
+int  ng_btsocket_l2cap_raw_peeraddr   (struct socket *, struct sockaddr **);
+int  ng_btsocket_l2cap_raw_send       (struct socket *, int, struct mbuf *,
+                                       struct sockaddr *, struct mbuf *,
+                                       struct thread *);
+int  ng_btsocket_l2cap_raw_sockaddr   (struct socket *, struct sockaddr **);
+
+#endif /* _KERNEL */
+
+/*****************************************************************************
+ *****************************************************************************
+ **                    SOCK_SEQPACKET L2CAP sockets                         **
+ *****************************************************************************
+ *****************************************************************************/
+
+#define NG_BTSOCKET_L2CAP_SENDSPACE	NG_L2CAP_MTU_DEFAULT /* (64 * 1024) */
+#define NG_BTSOCKET_L2CAP_RECVSPACE	(64 * 1024)
+
+/*
+ * Bluetooth L2CAP socket PCB
+ */
+
+struct ng_btsocket_l2cap_pcb {
+	struct socket			*so;	     /* Pointer to socket */
+
+	bdaddr_t			 src;	     /* Source address */
+	bdaddr_t			 dst;	     /* Destination address */
+
+	u_int16_t			 psm;	     /* PSM */
+	u_int16_t			 cid;	     /* Local channel ID */
+
+	u_int16_t			 flags;      /* socket flags */
+#define NG_BTSOCKET_L2CAP_CLIENT	(1 << 0)     /* socket is client */
+#define NG_BTSOCKET_L2CAP_TIMO		(1 << 1)     /* timeout pending */
+
+	u_int8_t			 state;      /* socket state */
+#define NG_BTSOCKET_L2CAP_CLOSED	0            /* socket closed */
+#define NG_BTSOCKET_L2CAP_CONNECTING	1            /* wait for connect */
+#define NG_BTSOCKET_L2CAP_CONFIGURING	2            /* wait for config */
+#define NG_BTSOCKET_L2CAP_OPEN		3            /* socket open */
+#define NG_BTSOCKET_L2CAP_DISCONNECTING	4            /* wait for disconnect */
+
+	u_int8_t			 cfg_state;  /* config state */
+#define	NG_BTSOCKET_L2CAP_CFG_IN	(1 << 0)     /* incoming path done */
+#define	NG_BTSOCKET_L2CAP_CFG_OUT	(1 << 1)     /* outgoing path done */
+#define	NG_BTSOCKET_L2CAP_CFG_BOTH \
+	(NG_BTSOCKET_L2CAP_CFG_IN | NG_BTSOCKET_L2CAP_CFG_OUT)
+
+#define	NG_BTSOCKET_L2CAP_CFG_IN_SENT	(1 << 2)     /* L2CAP ConfigReq sent */
+#define	NG_BTSOCKET_L2CAP_CFG_OUT_SENT	(1 << 3)     /* ---/--- */
+
+	u_int16_t			 imtu;       /* Incoming MTU */
+	ng_l2cap_flow_t			 iflow;      /* Input flow spec */
+
+	u_int16_t			 omtu;       /* Outgoing MTU */
+	ng_l2cap_flow_t			 oflow;      /* Outgoing flow spec */
+
+	u_int16_t			 flush_timo; /* flush timeout */   
+	u_int16_t			 link_timo;  /* link timeout */ 
+
+	struct callout_handle		 timo;       /* timeout */
+
+	u_int32_t			 token;	     /* message token */
+	ng_btsocket_l2cap_rtentry_p	 rt;         /* routing info */
+
+	struct mtx			 pcb_mtx;    /* pcb mutex */
+
+	LIST_ENTRY(ng_btsocket_l2cap_pcb) next;      /* link to next PCB */
+};
+typedef struct ng_btsocket_l2cap_pcb	ng_btsocket_l2cap_pcb_t;
+typedef struct ng_btsocket_l2cap_pcb *	ng_btsocket_l2cap_pcb_p;
+
+#define	so2l2cap_pcb(so) \
+	((struct ng_btsocket_l2cap_pcb *)((so)->so_pcb))
+
+/*
+ * Bluetooth L2CAP socket methods
+ */
+
+#ifdef _KERNEL
+
+void ng_btsocket_l2cap_init       (void);
+int  ng_btsocket_l2cap_abort      (struct socket *);
+int  ng_btsocket_l2cap_accept     (struct socket *, struct sockaddr **);
+int  ng_btsocket_l2cap_attach     (struct socket *, int, struct thread *);
+int  ng_btsocket_l2cap_bind       (struct socket *, struct sockaddr *,
+                                   struct thread *);
+int  ng_btsocket_l2cap_connect    (struct socket *, struct sockaddr *,
+                                   struct thread *);
+int  ng_btsocket_l2cap_control    (struct socket *, u_long, caddr_t,
+                                   struct ifnet *, struct thread *);
+int  ng_btsocket_l2cap_ctloutput  (struct socket *, struct sockopt *);
+int  ng_btsocket_l2cap_detach     (struct socket *);
+int  ng_btsocket_l2cap_disconnect (struct socket *);
+int  ng_btsocket_l2cap_listen     (struct socket *, struct thread *);
+int  ng_btsocket_l2cap_peeraddr   (struct socket *, struct sockaddr **);
+int  ng_btsocket_l2cap_send       (struct socket *, int, struct mbuf *,
+                                   struct sockaddr *, struct mbuf *,
+                                   struct thread *);
+int  ng_btsocket_l2cap_sockaddr   (struct socket *, struct sockaddr **);
+
+#endif /* _KERNEL */
+
+#endif /* _NETGRAPH_BTSOCKET_L2CAP_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_h4.h b/sys/netgraph/bluetooth/include/ng_h4.h
new file mode 100644
index 0000000..8f6f849
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_h4.h
@@ -0,0 +1,118 @@
+/*
+ * ng_h4.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_h4.h,v 1.5 2002/06/27 09:50:18 max Exp $
+ * $FreeBSD$
+ * 
+ * Based on:
+ * ---------
+ *
+ * FreeBSD: src/sys/netgraph/ng_tty.h
+ * Author: Archie Cobbs <archie@freebsd.org>
+ */
+
+/*
+ * This file contains everything that application needs to know about
+ * Bluetooth HCI UART transport layer as per chapter H4 of the Bluetooth
+ * Specification Book v1.1.
+ *
+ * This file can be included by both kernel and userland applications.
+ */
+
+#ifndef _NETGRAPH_H4_H_
+#define _NETGRAPH_H4_H_ 1
+
+/*
+ * H4 line discipline 
+ * XXX FIXME: does not belong here. Move to "ttycom.h" later
+ */
+
+#define H4DISC			7
+
+/**************************************************************************
+ **************************************************************************
+ **     Netgraph node hook name, type name and type cookie and commands
+ **************************************************************************
+ **************************************************************************/
+
+/* Hook name */
+#define NG_H4_HOOK		"hook"
+
+/* Node type name and magic cookie */
+#define NG_H4_NODE_TYPE		"h4"
+#define NGM_H4_COOKIE		1013899512
+
+/* Node states */
+#define NG_H4_W4_PKT_IND	1	/* Waiting for packet indicator */
+#define NG_H4_W4_PKT_HDR	2	/* Waiting for packet header */
+#define NG_H4_W4_PKT_DATA	3	/* Waiting for packet data */
+
+/* Debug levels */
+#define NG_H4_ALERT_LEVEL	1
+#define NG_H4_ERR_LEVEL		2
+#define NG_H4_WARN_LEVEL	3
+#define NG_H4_INFO_LEVEL	4
+
+/**************************************************************************
+ **************************************************************************
+ **                    H4 node command/event parameters
+ **************************************************************************
+ **************************************************************************/
+
+/* Reset node */
+#define NGM_H4_NODE_RESET	1
+
+/* Get node state (see states above) */
+#define NGM_H4_NODE_GET_STATE	2
+typedef u_int16_t	ng_h4_node_state_ep;
+
+/* Get/Set node debug level (see levels above) */
+#define NGM_H4_NODE_GET_DEBUG	3
+#define NGM_H4_NODE_SET_DEBUG	4
+typedef u_int16_t	ng_h4_node_debug_ep;
+
+/* Get/Set max queue length for the node */
+#define NGM_H4_NODE_GET_QLEN	5
+#define NGM_H4_NODE_SET_QLEN	6
+typedef int32_t		ng_h4_node_qlen_ep;
+
+/* Get node statistic */
+#define NGM_H4_NODE_GET_STAT	7
+typedef struct {
+	u_int32_t	pckts_recv; /* # of packets received */
+	u_int32_t	bytes_recv; /* # of bytes received */
+	u_int32_t	pckts_sent; /* # of packets sent */
+	u_int32_t	bytes_sent; /* # of bytes sent */
+	u_int32_t	oerrors;    /* # of output errors */
+	u_int32_t	ierrors;    /* # of input errors */
+} ng_h4_node_stat_ep;
+
+/* Reset node statistic */
+#define NGM_H4_NODE_RESET_STAT	8
+
+#endif /* _NETGRAPH_H4_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_hci.h b/sys/netgraph/bluetooth/include/ng_hci.h
new file mode 100644
index 0000000..c4b1aba
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_hci.h
@@ -0,0 +1,1651 @@
+/*
+ * ng_hci.h
+ *
+ * Copyright (c) 2001 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_hci.h,v 1.13 2002/11/12 22:35:39 max Exp $
+ * $FreeBSD$
+ */
+
+/*
+ * This file contains everything that application needs to know about
+ * Host Controller Interface (HCI). All information was obtained from
+ * Bluetooth Specification Book v1.1.
+ *
+ * This file can be included by both kernel and userland applications.
+ *
+ * NOTE: Here and after Bluetooth device is called a "unit". Bluetooth
+ *       specification refers to both devices and units. They are the
+ *       same thing (i think), so to be consistent word "unit" will be
+ *       used.
+ */
+
+#ifndef _NETGRAPH_HCI_H_
+#define _NETGRAPH_HCI_H_ 1
+
+/**************************************************************************
+ **************************************************************************
+ **     Netgraph node hook name, type name and type cookie and commands
+ **************************************************************************
+ **************************************************************************/
+
+/* Node type name and type cookie */
+#define NG_HCI_NODE_TYPE			"hci"
+#define NGM_HCI_COOKIE				1000774184
+
+/* Netgraph node hook names */
+#define NG_HCI_HOOK_DRV				"drv" /* Driver <-> HCI */
+#define NG_HCI_HOOK_ACL				"acl" /* HCI <-> Upper */
+#define NG_HCI_HOOK_SCO				"sco" /* HCI <-> Upper */ 
+#define NG_HCI_HOOK_RAW				"raw" /* HCI <-> Upper */ 
+
+/**************************************************************************
+ **************************************************************************
+ **                   Common defines and types (HCI)
+ **************************************************************************
+ **************************************************************************/
+
+/* All sizes are in bytes */
+#define NG_HCI_BDADDR_SIZE			6   /* unit address */
+#define NG_HCI_LAP_SIZE				3   /* unit LAP */
+#define NG_HCI_KEY_SIZE				16  /* link key */
+#define NG_HCI_PIN_SIZE				16  /* link PIN */
+#define NG_HCI_EVENT_MASK_SIZE			8   /* event mask */
+#define NG_HCI_CLASS_SIZE			3   /* unit class */
+#define NG_HCI_FEATURES_SIZE			8   /* LMP features */
+#define NG_HCI_UNIT_NAME_SIZE			248 /* unit name size */
+
+/* HCI specification */
+#define NG_HCI_SPEC_V10				0x00 /* v1.0 */
+#define NG_HCI_SPEC_V11				0x01 /* v1.1 */
+/* 0x02 - 0xFF - reserved for future use */
+
+/* LMP features */
+/* ------------------- byte 0 --------------------*/
+#define NG_HCI_LMP_3SLOT			0x01
+#define NG_HCI_LMP_5SLOT			0x02
+#define NG_HCI_LMP_ENCRYPTION			0x04
+#define NG_HCI_LMP_SLOT_OFFSET			0x08
+#define NG_HCI_LMP_TIMING_ACCURACY		0x10
+#define NG_HCI_LMP_SWITCH			0x20
+#define NG_HCI_LMP_HOLD_MODE			0x40
+#define NG_HCI_LMP_SNIFF_MODE			0x80
+/* ------------------- byte 1 --------------------*/
+#define NG_HCI_LMP_PARK_MODE			0x01
+#define NG_HCI_LMP_RSSI				0x02
+#define NG_HCI_LMP_CHANNEL_QUALITY		0x04
+#define NG_HCI_LMP_SCO_LINK			0x08
+#define NG_HCI_LMP_HV2_PKT			0x10
+#define NG_HCI_LMP_HV3_PKT			0x20
+#define NG_HCI_LMP_ULAW_LOG			0x40
+#define NG_HCI_LMP_ALAW_LOG			0x80
+/* ------------------- byte 2 --------------------*/
+#define NG_HCI_LMP_CVSD				0x01
+#define NG_HCI_LMP_PAGING_SCHEME		0x02
+#define NG_HCI_LMP_POWER_CONTROL		0x04
+#define NG_HCI_LMP_TRANSPARENT_SCO		0x08
+#define NG_HCI_LMP_FLOW_CONTROL_LAG0		0x10
+#define NG_HCI_LMP_FLOW_CONTROL_LAG1		0x20
+#define NG_HCI_LMP_FLOW_CONTROL_LAG2		0x40
+
+/* Link types */
+#define NG_HCI_LINK_SCO				0x00 /* Voice */
+#define NG_HCI_LINK_ACL				0x01 /* Data */
+/* 0x02 - 0xFF - reserved for future use */
+
+/* Packet types */
+				/* 0x0001 - 0x0004 - reserved for future use */
+#define NG_HCI_PKT_DM1				0x0008 /* ACL link */
+#define NG_HCI_PKT_DH1				0x0010 /* ACL link */
+#define NG_HCI_PKT_HV1				0x0020 /* SCO link */
+#define NG_HCI_PKT_HV2				0x0040 /* SCO link */
+#define NG_HCI_PKT_HV3				0x0080 /* SCO link */
+				/* 0x0100 - 0x0200 - reserved for future use */
+#define NG_HCI_PKT_DM3				0x0400 /* ACL link */
+#define NG_HCI_PKT_DH3				0x0800 /* ACL link */
+				/* 0x1000 - 0x2000 - reserved for future use */
+#define NG_HCI_PKT_DM5				0x4000 /* ACL link */
+#define NG_HCI_PKT_DH5				0x8000 /* ACL link */
+
+/* 
+ * Connection modes/Unit modes
+ *
+ * This is confusing. It means that one of the units change its mode
+ * for the specific connection. For example one connection was put on 
+ * hold (but i could be wrong :) 
+ */
+
+#define NG_HCI_UNIT_MODE_ACTIVE			0x00
+#define NG_HCI_UNIT_MODE_HOLD			0x01
+#define NG_HCI_UNIT_MODE_SNIFF			0x02
+#define NG_HCI_UNIT_MODE_PARK			0x03
+/* 0x04 - 0xFF - reserved for future use */
+
+/* Page scan modes */
+#define NG_HCI_MANDATORY_PAGE_SCAN_MODE		0x00
+#define NG_HCI_OPTIONAL_PAGE_SCAN_MODE1		0x01
+#define NG_HCI_OPTIONAL_PAGE_SCAN_MODE2		0x02
+#define NG_HCI_OPTIONAL_PAGE_SCAN_MODE3		0x03
+/* 0x04 - 0xFF - reserved for future use */
+
+/* Page scan repetition modes */
+#define NG_HCI_SCAN_REP_MODE0			0x00
+#define NG_HCI_SCAN_REP_MODE1			0x01
+#define NG_HCI_SCAN_REP_MODE2			0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Page scan period modes */
+#define NG_HCI_PAGE_SCAN_PERIOD_MODE0		0x00
+#define NG_HCI_PAGE_SCAN_PERIOD_MODE1		0x01
+#define NG_HCI_PAGE_SCAN_PERIOD_MODE2		0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Scan enable */
+#define NG_HCI_NO_SCAN_ENABLE			0x00
+#define NG_HCI_INQUIRY_ENABLE_PAGE_DISABLE	0x01
+#define NG_HCI_INQUIRY_DISABLE_PAGE_ENABLE	0x02
+#define NG_HCI_INQUIRY_ENABLE_PAGE_ENABLE	0x03
+/* 0x04 - 0xFF - reserved for future use */
+
+/* Hold mode activities */
+#define NG_HCI_HOLD_MODE_NO_CHANGE		0x00
+#define NG_HCI_HOLD_MODE_SUSPEND_PAGE_SCAN	0x01
+#define NG_HCI_HOLD_MODE_SUSPEND_INQUIRY_SCAN	0x02
+#define NG_HCI_HOLD_MODE_SUSPEND_PERIOD_INQUIRY	0x04
+/* 0x08 - 0x80 - reserved for future use */
+
+/* Connection roles */
+#define NG_HCI_ROLE_MASTER			0x00
+#define NG_HCI_ROLE_SLAVE			0x01
+/* 0x02 - 0xFF - reserved for future use */
+
+/* Key flags */
+#define NG_HCI_USE_SEMI_PERMANENT_LINK_KEYS	0x00
+#define NG_HCI_USE_TEMPORARY_LINK_KEY		0x01
+/* 0x02 - 0xFF - reserved for future use */
+
+/* Pin types */
+#define NG_HCI_PIN_TYPE_VARIABLE		0x00
+#define NG_HCI_PIN_TYPE_FIXED			0x01
+
+/* Link key types */
+#define NG_HCI_LINK_KEY_TYPE_COMBINATION_KEY	0x00
+#define NG_HCI_LINK_KEY_TYPE_LOCAL_UNIT_KEY	0x01
+#define NG_HCI_LINK_KEY_TYPE_REMOTE_UNIT_KEY	0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Encryption modes */
+#define NG_HCI_ENCRYPTION_MODE_NONE		0x00
+#define NG_HCI_ENCRYPTION_MODE_P2P		0x01
+#define NG_HCI_ENCRYPTION_MODE_ALL		0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Quality of service types */
+#define NG_HCI_SERVICE_TYPE_NO_TRAFFIC		0x00
+#define NG_HCI_SERVICE_TYPE_BEST_EFFORT		0x01
+#define NG_HCI_SERVICE_TYPE_GUARANTEED		0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Link policy settings */
+#define NG_HCI_LINK_POLICY_DISABLE_ALL_LM_MODES	0x0000
+#define NG_HCI_LINK_POLICY_ENABLE_ROLE_SWITCH	0x0001 /* Master/Slave switch */
+#define NG_HCI_LINK_POLICY_ENABLE_HOLD_MODE	0x0002
+#define NG_HCI_LINK_POLICY_ENABLE_SNIFF_MODE	0x0004
+#define NG_HCI_LINK_POLICY_ENABLE_PARK_MODE	0x0008
+/* 0x0010 - 0x8000 - reserved for future use */
+
+/* Event masks */
+#define NG_HCI_EVMSK_ALL			0x00000000ffffffff
+#define NG_HCI_EVMSK_NONE			0x0000000000000000
+#define NG_HCI_EVMSK_INQUIRY_COMPL		0x0000000000000001
+#define NG_HCI_EVMSK_INQUIRY_RESULT		0x0000000000000002
+#define NG_HCI_EVMSK_CON_COMPL			0x0000000000000004
+#define NG_HCI_EVMSK_CON_REQ			0x0000000000000008
+#define NG_HCI_EVMSK_DISCON_COMPL		0x0000000000000010
+#define NG_HCI_EVMSK_AUTH_COMPL			0x0000000000000020
+#define NG_HCI_EVMSK_REMOTE_NAME_REQ_COMPL	0x0000000000000040
+#define NG_HCI_EVMSK_ENCRYPTION_CHANGE		0x0000000000000080
+#define NG_HCI_EVMSK_CHANGE_CON_LINK_KEY_COMPL	0x0000000000000100
+#define NG_HCI_EVMSK_MASTER_LINK_KEY_COMPL	0x0000000000000200
+#define NG_HCI_EVMSK_READ_REMOTE_FEATURES_COMPL	0x0000000000000400
+#define NG_HCI_EVMSK_READ_REMOTE_VER_INFO_COMPL	0x0000000000000800
+#define NG_HCI_EVMSK_QOS_SETUP_COMPL		0x0000000000001000
+#define NG_HCI_EVMSK_COMMAND_COMPL		0x0000000000002000
+#define NG_HCI_EVMSK_COMMAND_STATUS		0x0000000000004000
+#define NG_HCI_EVMSK_HARDWARE_ERROR		0x0000000000008000
+#define NG_HCI_EVMSK_FLUSH_OCCUR		0x0000000000010000
+#define NG_HCI_EVMSK_ROLE_CHANGE		0x0000000000020000
+#define NG_HCI_EVMSK_NUM_COMPL_PKTS		0x0000000000040000
+#define NG_HCI_EVMSK_MODE_CHANGE		0x0000000000080000
+#define NG_HCI_EVMSK_RETURN_LINK_KEYS		0x0000000000100000
+#define NG_HCI_EVMSK_PIN_CODE_REQ		0x0000000000200000
+#define NG_HCI_EVMSK_LINK_KEY_REQ		0x0000000000400000
+#define NG_HCI_EVMSK_LINK_KEY_NOTIFICATION	0x0000000000800000
+#define NG_HCI_EVMSK_LOOPBACK_COMMAND		0x0000000001000000
+#define NG_HCI_EVMSK_DATA_BUFFER_OVERFLOW	0x0000000002000000
+#define NG_HCI_EVMSK_MAX_SLOT_CHANGE		0x0000000004000000
+#define NG_HCI_EVMSK_READ_CLOCK_OFFSET_COMLETE	0x0000000008000000
+#define NG_HCI_EVMSK_CON_PKT_TYPE_CHANGED	0x0000000010000000
+#define NG_HCI_EVMSK_QOS_VIOLATION		0x0000000020000000
+#define NG_HCI_EVMSK_PAGE_SCAN_MODE_CHANGE	0x0000000040000000
+#define NG_HCI_EVMSK_PAGE_SCAN_REP_MODE_CHANGE	0x0000000080000000
+/* 0x0000000100000000 - 0x8000000000000000 - reserved for future use */
+
+/* Filter types */
+#define NG_HCI_FILTER_TYPE_NONE			0x00
+#define NG_HCI_FILTER_TYPE_INQUIRY_RESULT	0x01
+#define NG_HCI_FILTER_TYPE_CON_SETUP		0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Filter condition types for NG_HCI_FILTER_TYPE_INQUIRY_RESULT */
+#define NG_HCI_FILTER_COND_INQUIRY_NEW_UNIT	0x00
+#define NG_HCI_FILTER_COND_INQUIRY_UNIT_CLASS	0x01
+#define NG_HCI_FILTER_COND_INQUIRY_BDADDR	0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Filter condition types for NG_HCI_FILTER_TYPE_CON_SETUP */
+#define NG_HCI_FILTER_COND_CON_ANY_UNIT		0x00
+#define NG_HCI_FILTER_COND_CON_UNIT_CLASS	0x01
+#define NG_HCI_FILTER_COND_CON_BDADDR		0x02
+/* 0x03 - 0xFF - reserved for future use */
+
+/* Xmit level types */
+#define NG_HCI_XMIT_LEVEL_CURRENT		0x00
+#define NG_HCI_XMIT_LEVEL_MAXIMUM		0x01
+/* 0x02 - 0xFF - reserved for future use */
+
+/* Host to Host Controller flow control */
+#define NG_HCI_H2HC_FLOW_CONTROL_NONE		0x00
+#define NG_HCI_H2HC_FLOW_CONTROL_ACL		0x01
+#define NG_HCI_H2HC_FLOW_CONTROL_SCO		0x02
+#define NG_HCI_H2HC_FLOW_CONTROL_BOTH		0x03	/* ACL and SCO */
+/* 0x04 - 0xFF - reserved future use */
+
+/* Country codes */
+#define NG_HCI_COUNTRY_CODE_NAM_EUR_JP		0x00
+#define NG_HCI_COUNTRY_CODE_FRANCE		0x01
+/* 0x02 - 0xFF - reserved future use */
+
+/* Loopback modes */
+#define NG_HCI_LOOPBACK_NONE			0x00
+#define NG_HCI_LOOPBACK_LOCAL			0x01
+#define NG_HCI_LOOPBACK_REMOTE			0x02
+/* 0x03 - 0xFF - reserved future use */
+
+/**************************************************************************
+ **************************************************************************
+ **                 Link level defines, headers and types
+ **************************************************************************
+ **************************************************************************/
+
+/* 
+ * Macro(s) to combine OpCode and extract OGF (OpCode Group Field) 
+ * and OCF (OpCode Command Field) from OpCode.
+ */
+
+#define NG_HCI_OPCODE(gf,cf)		((((gf) & 0x3f) << 10) | ((cf) & 0x3ff))
+#define NG_HCI_OCF(op)			((op) & 0x3ff)
+#define NG_HCI_OGF(op)			(((op) >> 10) & 0x3f)
+
+/* 
+ * Marco(s) to extract/combine connection handle, BC (Broadcast) and 
+ * PB (Packet boundary) flags.
+ */
+
+#define NG_HCI_CON_HANDLE(h)		((h) & 0x0fff)
+#define NG_HCI_PB_FLAG(h)		(((h) & 0x3000) >> 12)
+#define NG_HCI_BC_FLAG(h)		(((h) & 0xc000) >> 14)
+#define NG_HCI_MK_CON_HANDLE(h, pb, bc) \
+	(((h) & 0x0fff) | (((pb) & 3) << 12) | (((bc) & 3) << 14))
+
+/* PB flag values */
+					/* 00 - reserved for future use */
+#define	NG_HCI_PACKET_FRAGMENT		0x1 
+#define	NG_HCI_PACKET_START		0x2
+					/* 11 - reserved for future use */
+
+/* BC flag values */
+#define NG_HCI_POINT2POINT		0x0 /* only Host controller to Host */
+#define NG_HCI_BROADCAST_ACTIVE		0x1 /* both directions */
+#define NG_HCI_BROADCAST_PICONET	0x2 /* both directions */
+					/* 11 - reserved for future use */
+
+/* HCI command packet header */
+#define NG_HCI_CMD_PKT			0x01
+#define NG_HCI_CMD_PKT_SIZE		0xff /* without header */
+typedef struct {
+	u_int8_t	type;   /* MUST be 0x1 */
+	u_int16_t	opcode; /* OpCode */
+	u_int8_t	length; /* parameter(s) length in bytes */
+} __attribute__ ((packed)) ng_hci_cmd_pkt_t;
+
+/* ACL data packet header */
+#define NG_HCI_ACL_DATA_PKT		0x02
+#define NG_HCI_ACL_PKT_SIZE		0xffff /* without header */
+typedef struct {
+	u_int8_t	type;        /* MUST be 0x2 */
+	u_int16_t	con_handle;  /* connection handle + PB + BC flags */
+	u_int16_t	length;      /* payload length in bytes */
+} __attribute__ ((packed)) ng_hci_acldata_pkt_t;
+
+/* SCO data packet header */
+#define NG_HCI_SCO_DATA_PKT		0x03
+#define NG_HCI_SCO_PKT_SIZE		0xff /* without header */
+typedef struct {
+	u_int8_t	type;       /* MUST be 0x3 */
+	u_int16_t	con_handle; /* connection handle + reserved bits */
+	u_int8_t	length;     /* payload length in bytes */
+} __attribute__ ((packed)) ng_hci_scodata_pkt_t;
+
+/* HCI event packet header */
+#define NG_HCI_EVENT_PKT		0x04
+#define NG_HCI_EVENT_PKT_SIZE		0xff /* without header */
+typedef struct {
+	u_int8_t	type;   /* MUST be 0x4 */
+	u_int8_t	event;  /* event */
+	u_int8_t	length; /* parameter(s) length in bytes */
+} __attribute__ ((packed)) ng_hci_event_pkt_t;
+
+/* Bluetooth unit address */
+typedef struct {
+	u_int8_t	b[NG_HCI_BDADDR_SIZE];
+} __attribute__ ((packed)) bdaddr_t;
+typedef bdaddr_t *	bdaddr_p;
+
+/* Any BD_ADDR. Note: This is actually 7 bytes (count '\0' terminator) */
+#define NG_HCI_BDADDR_ANY	((bdaddr_p) "\000\000\000\000\000\000")
+
+/* HCI status return parameter */
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+} __attribute__ ((packed)) ng_hci_status_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **        Upper layer protocol interface. LP_xxx event parameters
+ **************************************************************************
+ **************************************************************************/
+
+/* Connection Request Event */
+#define NGM_HCI_LP_CON_REQ			1  /* Upper -> HCI */
+typedef struct {
+	u_int16_t	link_type; /* type of connection */
+	bdaddr_t	bdaddr;    /* remote unit address */
+} ng_hci_lp_con_req_ep;
+
+/*
+ * XXX XXX XXX
+ *
+ * NOTE: This request is not defined by Bluetooth specification, 
+ * but i find it useful :)
+ */
+#define NGM_HCI_LP_DISCON_REQ			2 /* Upper -> HCI */
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	reason;	    /* reason to disconnect (only low byte) */
+} ng_hci_lp_discon_req_ep;
+
+/* Connection Confirmation Event */
+#define NGM_HCI_LP_CON_CFM			3  /* HCI -> Upper */
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int8_t	link_type;  /* link type */
+	u_int16_t	con_handle; /* con_handle */
+	bdaddr_t	bdaddr;     /* remote unit address */
+} ng_hci_lp_con_cfm_ep;
+
+/* Connection Indication Event */
+#define NGM_HCI_LP_CON_IND			4  /* HCI -> Upper */
+typedef struct {
+	u_int8_t	link_type;                 /* link type */
+	u_int8_t	uclass[NG_HCI_CLASS_SIZE]; /* unit class */
+	bdaddr_t	bdaddr;                    /* remote unit address */
+} ng_hci_lp_con_ind_ep;
+
+/* Connection Response Event */
+#define NGM_HCI_LP_CON_RSP			5  /* Upper -> HCI */
+typedef struct {
+	u_int8_t	status;    /* 0x00 - accept connection */
+	u_int8_t	link_type; /* link type */
+	bdaddr_t	bdaddr;    /* remote unit address */
+} ng_hci_lp_con_rsp_ep;
+
+/* Disconnection Indication Event */
+#define NGM_HCI_LP_DISCON_IND			6  /* HCI -> Upper */
+typedef struct {
+	u_int8_t	reason;     /* reason to disconnect (only low byte) */
+	u_int8_t	link_type;  /* link type */
+	u_int16_t	con_handle; /* connection handle */
+} ng_hci_lp_discon_ind_ep;
+
+/* QoS Setup Request Event */
+#define NGM_HCI_LP_QOS_REQ			7  /* Upper -> HCI */
+typedef struct {
+	u_int16_t	con_handle;      /* connection handle */
+	u_int8_t	flags;           /* reserved */
+	u_int8_t	service_type;    /* service type */
+	u_int32_t	token_rate;      /* bytes/sec */
+	u_int32_t	peak_bandwidth;  /* bytes/sec */
+	u_int32_t	latency;         /* msec */
+	u_int32_t	delay_variation; /* msec */
+} ng_hci_lp_qos_req_ep;
+
+/* QoS Conformition Event */
+#define NGM_HCI_LP_QOS_CFM			8  /* HCI -> Upper */
+typedef struct {
+	u_int16_t	status;          /* 0x00 - success  (only low byte) */
+	u_int16_t	con_handle;      /* connection handle */
+} ng_hci_lp_qos_cfm_ep;
+
+/* QoS Violation Indication Event */
+#define NGM_HCI_LP_QOS_IND			9  /* HCI -> Upper */
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} ng_hci_lp_qos_ind_ep;
+
+/**************************************************************************
+ **************************************************************************
+ **                    HCI node command/event parameters
+ **************************************************************************
+ **************************************************************************/
+
+/* Debug levels */
+#define NG_HCI_ALERT_LEVEL		1
+#define NG_HCI_ERR_LEVEL		2
+#define NG_HCI_WARN_LEVEL		3
+#define NG_HCI_INFO_LEVEL		4
+
+/* Unit states */
+#define NG_HCI_UNIT_CONNECTED		(1 << 0)
+#define NG_HCI_UNIT_INITED		(1 << 1)
+#define NG_HCI_UNIT_READY	(NG_HCI_UNIT_CONNECTED|NG_HCI_UNIT_INITED)
+#define NG_HCI_UNIT_COMMAND_PENDING	(1 << 2)
+
+/* Connection state */
+#define NG_HCI_CON_CLOSED		0 /* connection closed */
+#define NG_HCI_CON_W4_LP_CON_RSP	1 /* wait for LP_ConnectRsp */
+#define NG_HCI_CON_W4_CONN_COMPLETE	2 /* wait for Connection_Complete evt */
+#define NG_HCI_CON_OPEN			3 /* connection open */
+
+/* Get HCI node (unit) state (see states above) */
+#define NGM_HCI_NODE_GET_STATE			100  /* HCI -> User */
+typedef u_int16_t	ng_hci_node_state_ep;
+
+/* Turn on "inited" bit */
+#define NGM_HCI_NODE_INIT			101 /* User -> HCI */
+/* No parameters */
+
+/* Get/Set node debug level (see debug levels above) */
+#define NGM_HCI_NODE_GET_DEBUG			102 /* HCI -> User */
+#define NGM_HCI_NODE_SET_DEBUG			103 /* User -> HCI */
+typedef u_int16_t	ng_hci_node_debug_ep;
+
+/* Get node buffer info */
+#define NGM_HCI_NODE_GET_BUFFER			104 /* HCI -> User */
+typedef struct {
+	u_int8_t	cmd_free; /* number of free command packets */
+	u_int8_t	sco_size; /* max. size of SCO packet */
+	u_int16_t	sco_pkts; /* number of SCO packets */
+	u_int16_t	sco_free; /* number of free SCO packets */
+	u_int16_t	acl_size; /* max. size of ACL packet */
+	u_int16_t	acl_pkts; /* number of ACL packets */
+	u_int16_t	acl_free; /* number of free ACL packets */
+} ng_hci_node_buffer_ep;
+
+/* Get BDADDR */
+#define NGM_HCI_NODE_GET_BDADDR			105 /* HCI -> User */
+/* bdaddr_t -- BDADDR */
+
+/* Get features */
+#define NGM_HCI_NODE_GET_FEATURES		106 /* HCI -> User */
+/* features[NG_HCI_FEATURES_SIZE] -- features */
+
+#define NGM_HCI_NODE_GET_STAT			107 /* HCI -> User */
+typedef struct {
+	u_int32_t	cmd_sent;   /* number of HCI commands sent */
+	u_int32_t	evnt_recv;  /* number of HCI events received */
+	u_int32_t	acl_recv;   /* number of ACL packets received */
+	u_int32_t	acl_sent;   /* number of ACL packets sent */
+	u_int32_t	sco_recv;   /* number of SCO packets received */
+	u_int32_t	sco_sent;   /* number of SCO packets sent */
+	u_int32_t	bytes_recv; /* total number of bytes received */
+	u_int32_t	bytes_sent; /* total number of bytes sent */
+} ng_hci_node_stat_ep;
+
+#define NGM_HCI_NODE_RESET_STAT			108 /* User -> HCI */
+/* No parameters */
+
+#define NGM_HCI_NODE_FLUSH_NEIGHBOR_CACHE	109 /* User -> HCI */
+
+#define NGM_HCI_NODE_GET_NEIGHBOR_CACHE		110 /* HCI -> User */
+typedef struct {
+	u_int32_t	num_entries;	/* number of entries */
+} ng_hci_node_get_neighbor_cache_ep;
+
+typedef struct {
+	u_int16_t	page_scan_rep_mode;             /* page rep scan mode */
+	u_int16_t	page_scan_mode;                 /* page scan mode */
+	u_int16_t	clock_offset;                   /* clock offset */
+	bdaddr_t	bdaddr;                         /* bdaddr */
+	u_int8_t	features[NG_HCI_FEATURES_SIZE]; /* features */
+} ng_hci_node_neighbor_cache_entry_ep;
+
+#define NG_HCI_MAX_NEIGHBOR_NUM \
+	((0xffff - sizeof(ng_hci_node_get_neighbor_cache_ep))/sizeof(ng_hci_node_neighbor_cache_entry_ep))
+
+#define NGM_HCI_NODE_GET_CON_LIST		111 /* HCI -> User */
+typedef struct {
+	u_int32_t	num_connections; /* number of connections */
+} ng_hci_node_con_list_ep;
+
+typedef struct {
+	u_int8_t	link_type;       /* ACL or SCO */
+	u_int8_t	encryption_mode; /* none, p2p, ... */
+	u_int8_t	mode;            /* ACTIVE, HOLD ... */
+	u_int8_t	role;            /* MASTER/SLAVE */
+	u_int16_t	state;           /* connection state */
+	u_int16_t	reserved;        /* place holder */
+	u_int16_t	pending;         /* number of pending packets */
+	u_int16_t	queue_len;       /* number of packets in queue */
+	u_int16_t	con_handle;      /* connection handle */
+	bdaddr_t	bdaddr;          /* remote bdaddr */
+} ng_hci_node_con_ep;
+
+#define NG_HCI_MAX_CON_NUM \
+	((0xffff - sizeof(ng_hci_node_con_list_ep))/sizeof(ng_hci_node_con_ep))
+
+#define NGM_HCI_NODE_UP				112 /* HCI -> Upper */
+typedef struct {
+	u_int16_t	pkt_size; /* max. ACL/SCO packet size (w/out header) */
+	u_int16_t	num_pkts; /* ACL/SCO packet queue size */
+	u_int16_t	reserved; /* place holder */
+	bdaddr_t	bdaddr;	  /* bdaddr */
+} ng_hci_node_up_ep;
+
+#define NGM_HCI_SYNC_CON_QUEUE			113 /* HCI -> Upper */
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	completed;  /* number of completed packets */
+} ng_hci_sync_con_queue_ep;
+
+#define NGM_HCI_NODE_GET_LINK_POLICY_SETTINGS_MASK	114 /* HCI -> User */
+#define NGM_HCI_NODE_SET_LINK_POLICY_SETTINGS_MASK	115 /* User -> HCI */
+typedef u_int16_t	ng_hci_node_link_policy_mask_ep;
+
+#define NGM_HCI_NODE_GET_PACKET_MASK		116 /* HCI -> User */
+#define NGM_HCI_NODE_SET_PACKET_MASK		117 /* User -> HCI */
+typedef u_int16_t	ng_hci_node_packet_mask_ep;
+
+/**************************************************************************
+ **************************************************************************
+ **             Link control commands and return parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_LINK_CONTROL			0x01 /* OpCode Group Field */
+
+#define NG_HCI_OCF_INQUIRY			0x0001
+typedef struct {
+	u_int8_t	lap[NG_HCI_LAP_SIZE]; /* LAP */
+	u_int8_t	inquiry_length; /* (N x 1.28) sec */
+	u_int8_t	num_responses;  /* Max. # of responses before halted */
+} __attribute__ ((packed)) ng_hci_inquiry_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_INQUIRY_CANCEL		0x0002
+/* No command parameter(s) */
+typedef ng_hci_status_rp	ng_hci_inquiry_cancel_rp;
+
+#define NG_HCI_OCF_PERIODIC_INQUIRY		0x0003
+typedef struct {
+	u_int16_t	max_period_length; /* Max. and min. amount of time */
+	u_int16_t	min_period_length; /* between consecutive inquiries */
+	u_int8_t	lap[NG_HCI_LAP_SIZE]; /* LAP */
+	u_int8_t	inquiry_length;    /* (inquiry_length * 1.28) sec */
+	u_int8_t	num_responses;     /* Max. # of responses */
+} __attribute__ ((packed)) ng_hci_periodic_inquiry_cp;
+
+typedef ng_hci_status_rp	ng_hci_periodic_inquiry_rp;
+	
+#define NG_HCI_OCF_EXIT_PERIODIC_INQUIRY	0x0004
+/* No command parameter(s) */
+typedef ng_hci_status_rp	ng_hci_exit_periodic_inquiry_rp;
+
+#define NG_HCI_OCF_CREATE_CON			0x0005
+typedef struct {
+	bdaddr_t	bdaddr;             /* destination address */
+	u_int16_t	pkt_type;           /* packet type */
+	u_int8_t	page_scan_rep_mode; /* page scan repetition mode */
+	u_int8_t	page_scan_mode;     /* page scan mode */
+	u_int16_t	clock_offset;       /* clock offset */
+	u_int8_t	accept_role_switch; /* accept role switch? 0x00 - no */
+} __attribute__ ((packed)) ng_hci_create_con_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_DISCON			0x0006
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	reason;     /* reason to disconnect */
+} __attribute__ ((packed)) ng_hci_discon_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_ADD_SCO_CON			0x0007
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	pkt_type;   /* packet type */
+} __attribute__ ((packed)) ng_hci_add_sco_con_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_ACCEPT_CON			0x0009
+typedef struct {
+	bdaddr_t	bdaddr; /* address of unit to be connected */
+	u_int8_t	role;   /* connection role */
+} __attribute__ ((packed)) ng_hci_accept_con_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_REJECT_CON			0x000a
+typedef struct {
+	bdaddr_t	bdaddr; /* remote address */
+	u_int8_t	reason; /* reason to reject */
+} __attribute__ ((packed)) ng_hci_reject_con_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_LINK_KEY_REP			0x000b
+typedef struct {
+	bdaddr_t	bdaddr;               /* remote address */
+	u_int8_t	key[NG_HCI_KEY_SIZE]; /* key */
+} __attribute__ ((packed)) ng_hci_link_key_rep_cp;
+
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* unit address */
+} __attribute__ ((packed)) ng_hci_link_key_rep_rp;
+
+#define NG_HCI_OCF_LINK_KEY_NEG_REP		0x000c
+typedef struct {
+	bdaddr_t	bdaddr; /* remote address */
+} __attribute__ ((packed)) ng_hci_link_key_neg_rep_cp;
+
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* unit address */
+} __attribute__ ((packed)) ng_hci_link_key_neg_rep_rp;
+
+#define NG_HCI_OCF_PIN_CODE_REP			0x000d
+typedef struct {
+	bdaddr_t	bdaddr;               /* remote address */
+	u_int8_t	pin_size;             /* pin code length (in bytes) */
+	u_int8_t	pin[NG_HCI_PIN_SIZE]; /* pin code */
+} __attribute__ ((packed)) ng_hci_pin_code_rep_cp;
+
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* unit address */
+} __attribute__ ((packed)) ng_hci_pin_code_rep_rp;
+
+#define NG_HCI_OCF_PIN_CODE_NEG_REP		0x000e
+typedef struct {
+	bdaddr_t	bdaddr;  /* remote address */
+} __attribute__ ((packed)) ng_hci_pin_code_neg_rep_cp;
+
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* unit address */
+} __attribute__ ((packed)) ng_hci_pin_code_neg_rep_rp;
+
+#define NG_HCI_OCF_CHANGE_CON_PKT_TYPE		0x000f
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	pkt_type;   /* packet type */
+} __attribute__ ((packed)) ng_hci_change_con_pkt_type_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_AUTH_REQ			0x0011
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_auth_req_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_SET_CON_ENCRYPTION		0x0013
+typedef struct {
+	u_int16_t	con_handle;        /* connection handle */
+	u_int8_t	encryption_enable; /* 0x00 - disable, 0x01 - enable */
+} __attribute__ ((packed)) ng_hci_set_con_encryption_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_CHANGE_CON_LINK_KEY		0x0015
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_change_con_link_key_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_MASTER_LINK_KEY		0x0017
+typedef struct {
+	u_int8_t	key_flag; /* key flag */
+} __attribute__ ((packed)) ng_hci_master_link_key_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_REMOTE_NAME_REQ		0x0019
+typedef struct {
+	bdaddr_t	bdaddr;             /* remote address */
+	u_int8_t	page_scan_rep_mode; /* page scan repetition mode */
+	u_int8_t	page_scan_mode;     /* page scan mode */
+	u_int16_t	clock_offset;       /* clock offset */
+} __attribute__ ((packed)) ng_hci_remote_name_req_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_READ_REMOTE_FEATURES		0x001b
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_remote_features_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_READ_REMOTE_VER_INFO		0x001d
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_remote_ver_info_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_READ_CLOCK_OFFSET		 0x001f
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_clock_offset_cp;
+/* No return parameter(s) */
+
+/**************************************************************************
+ **************************************************************************
+ **        Link policy commands and return parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_LINK_POLICY			0x02 /* OpCode Group Field */
+
+#define NG_HCI_OCF_HOLD_MODE			0x0001
+typedef struct {
+	u_int16_t	con_handle;   /* connection handle */
+	u_int16_t	max_interval; /* (max_interval * 0.625) msec */
+	u_int16_t	min_interval; /* (max_interval * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_hold_mode_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_SNIFF_MODE			0x0003
+typedef struct {
+	u_int16_t	con_handle;   /* connection handle */
+	u_int16_t	max_interval; /* (max_interval * 0.625) msec */
+	u_int16_t	min_interval; /* (max_interval * 0.625) msec */
+	u_int16_t	attempt;      /* (2 * attempt - 1) * 0.625 msec */
+	u_int16_t	timeout;      /* (2 * attempt - 1) * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_sniff_mode_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_EXIT_SNIFF_MODE		0x0004
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_exit_sniff_mode_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_PARK_MODE			0x0005
+typedef struct {
+	u_int16_t	con_handle;   /* connection handle */
+	u_int16_t	max_interval; /* (max_interval * 0.625) msec */
+	u_int16_t	min_interval; /* (max_interval * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_park_mode_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_EXIT_PARK_MODE		0x0006
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_exit_park_mode_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_QOS_SETUP			0x0007
+typedef struct {
+	u_int16_t	con_handle;      /* connection handle */
+	u_int8_t	flags;           /* reserved for future use */
+	u_int8_t	service_type;    /* service type */
+	u_int32_t	token_rate;      /* bytes per second */
+	u_int32_t	peak_bandwidth;  /* bytes per second */
+	u_int32_t	latency;         /* microseconds */
+	u_int32_t	delay_variation; /* microseconds */
+} __attribute__ ((packed)) ng_hci_qos_setup_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_ROLE_DISCOVERY		0x0009
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_role_discovery_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	role;       /* role for the connection handle */
+} __attribute__ ((packed)) ng_hci_role_discovery_rp;
+
+#define NG_HCI_OCF_SWITCH_ROLE			0x000b
+typedef struct {
+	bdaddr_t	bdaddr; /* remote address */
+	u_int8_t	role;   /* new local role */
+} __attribute__ ((packed)) ng_hci_switch_role_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_READ_LINK_POLICY_SETTINGS	0x000c
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_link_policy_settings_cp;
+	
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	settings;   /* link policy settings */
+} __attribute__ ((packed)) ng_hci_read_link_policy_settings_rp;
+
+#define NG_HCI_OCF_WRITE_LINK_POLICY_SETTINGS	0x000d
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	settings;   /* link policy settings */
+} __attribute__ ((packed)) ng_hci_write_link_policy_settings_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_write_link_policy_settings_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **   Host controller and baseband commands and return parameters 
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_HC_BASEBAND			0x03 /* OpCode Group Field */
+
+#define NG_HCI_OCF_SET_EVENT_MASK		0x0001
+typedef struct {
+	u_int8_t	event_mask[NG_HCI_EVENT_MASK_SIZE]; /* event_mask */
+} __attribute__ ((packed)) ng_hci_set_event_mask_cp;
+
+typedef ng_hci_status_rp	ng_hci_set_event_mask_rp;
+
+#define NG_HCI_OCF_RESET			0x0003
+/* No command parameter(s) */
+typedef ng_hci_status_rp	ng_hci_reset_rp;
+
+#define NG_HCI_OCF_SET_EVENT_FILTER		0x0005
+typedef struct {
+	u_int8_t	filter_type;           /* filter type */
+	u_int8_t	filter_condition_type; /* filter condition type */
+	u_int8_t	condition[0];          /* conditions - variable size */
+} __attribute__ ((packed)) ng_hci_set_event_filter_cp;
+
+typedef ng_hci_status_rp	ng_hci_set_event_filter_rp;
+
+#define NG_HCI_OCF_FLUSH			0x0008
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_flush_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_flush_rp;
+
+#define NG_HCI_OCF_READ_PIN_TYPE		0x0009
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;   /* 0x00 - success */
+	u_int8_t	pin_type; /* PIN type */
+} __attribute__ ((packed)) ng_hci_read_pin_type_rp;
+
+#define NG_HCI_OCF_WRITE_PIN_TYPE		0x000a
+typedef struct {
+	u_int8_t	pin_type; /* PIN type */
+} __attribute__ ((packed)) ng_hci_write_pin_type_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_pin_type_rp;
+
+#define NG_HCI_OCF_CREATE_NEW_UNIT_KEY		0x000b
+/* No command parameter(s) */
+typedef ng_hci_status_rp	ng_hci_create_new_unit_key_rp;
+
+#define NG_HCI_OCF_READ_STORED_LINK_KEY		0x000d
+typedef struct {
+	bdaddr_t	bdaddr;   /* address */
+	u_int8_t	read_all; /* read all keys? 0x01 - yes */
+} __attribute__ ((packed)) ng_hci_read_stored_link_key_cp;
+
+typedef struct {
+	u_int8_t	status;        /* 0x00 - success */
+	u_int16_t	max_num_keys;  /* Max. number of keys */
+	u_int16_t	num_keys_read; /* Number of stored keys */
+} __attribute__ ((packed)) ng_hci_read_stored_link_key_rp;
+
+#define NG_HCI_OCF_WRITE_STORED_LINK_KEY	0x0011
+typedef struct {
+	u_int8_t	num_keys_write; /* # of keys to write */
+/* these are repeated "num_keys_write" times 
+	bdaddr_t	bdaddr;                --- remote address(es)
+	u_int8_t	key[NG_HCI_KEY_SIZE];  --- key(s) */
+} __attribute__ ((packed)) ng_hci_write_stored_link_key_cp;
+
+typedef struct {
+	u_int8_t	status;           /* 0x00 - success */
+	u_int8_t	num_keys_written; /* # of keys successfully written */
+} __attribute__ ((packed)) ng_hci_write_stored_link_key_rp;
+
+#define NG_HCI_OCF_DELETE_STORED_LINK_KEY	0x0012
+typedef struct {
+	bdaddr_t	bdaddr;     /* address */
+	u_int8_t	delete_all; /* delete all keys? 0x01 - yes */
+} __attribute__ ((packed)) ng_hci_delete_stored_link_key_cp;
+
+typedef struct {
+	u_int8_t	status;           /* 0x00 - success */
+	u_int16_t	num_keys_deleted; /* Number of keys deleted */
+} __attribute__ ((packed)) ng_hci_delete_stored_link_key_rp;
+
+#define NG_HCI_OCF_CHANGE_LOCAL_NAME		0x0013
+typedef struct {
+	char		name[NG_HCI_UNIT_NAME_SIZE]; /* new unit name */
+} __attribute__ ((packed)) ng_hci_change_local_name_cp;
+
+typedef ng_hci_status_rp	ng_hci_change_local_name_rp;
+
+#define NG_HCI_OCF_READ_LOCAL_NAME		0x0014
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	char		name[NG_HCI_UNIT_NAME_SIZE]; /* unit name */
+} __attribute__ ((packed)) ng_hci_read_local_name_rp;
+
+#define NG_HCI_OCF_READ_CON_ACCEPT_TIMO		0x0015
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	u_int16_t	timeout; /* (timeout * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_read_con_accept_timo_rp;
+
+#define NG_HCI_OCF_WRITE_CON_ACCEPT_TIMO	0x0016
+typedef struct {
+	u_int16_t	timeout; /* (timeout * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_write_con_accept_timo_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_con_accept_timo_rp;
+
+#define NG_HCI_OCF_READ_PAGE_TIMO		0x0017
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	u_int16_t	timeout; /* (timeout * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_read_page_timo_rp;
+
+#define NG_HCI_OCF_WRITE_PAGE_TIMO		0x0018
+typedef struct {
+	u_int16_t	timeout; /* (timeout * 0.625) msec */
+} __attribute__ ((packed)) ng_hci_write_page_timo_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_page_timo_rp;
+
+#define NG_HCI_OCF_READ_SCAN_ENABLE		0x0019
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;      /* 0x00 - success */
+	u_int8_t	scan_enable; /* Scan enable */
+} __attribute__ ((packed)) ng_hci_read_scan_enable_rp;
+
+#define NG_HCI_OCF_WRITE_SCAN_ENABLE		0x001a
+typedef struct {
+	u_int8_t	scan_enable; /* Scan enable */
+} __attribute__ ((packed)) ng_hci_write_scan_enable_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_scan_enable_rp;
+
+#define NG_HCI_OCF_READ_PAGE_SCAN_ACTIVITY	0x001b
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;             /* 0x00 - success */
+	u_int16_t	page_scan_interval; /* interval * 0.625 msec */
+	u_int16_t	page_scan_window;   /* window * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_read_page_scan_activity_rp;
+
+#define NG_HCI_OCF_WRITE_PAGE_SCAN_ACTIVITY	0x001c
+typedef struct {
+	u_int16_t	page_scan_interval; /* interval * 0.625 msec */
+	u_int16_t	page_scan_window;   /* window * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_write_page_scan_activity_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_page_scan_activity_rp;
+
+#define NG_HCI_OCF_READ_INQUIRY_SCAN_ACTIVITY	0x001d
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;                /* 0x00 - success */
+	u_int16_t	inquiry_scan_interval; /* interval * 0.625 msec */
+	u_int16_t	inquiry_scan_window;   /* window * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_read_inquiry_scan_activity_rp;
+
+#define NG_HCI_OCF_WRITE_INQUIRY_SCAN_ACTIVITY	0x001e
+typedef struct {
+	u_int16_t	inquiry_scan_interval; /* interval * 0.625 msec */
+	u_int16_t	inquiry_scan_window;   /* window * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_write_inquiry_scan_activity_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_inquiry_scan_activity_rp;
+
+#define NG_HCI_OCF_READ_AUTH_ENABLE		0x001f
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;      /* 0x00 - success */
+	u_int8_t	auth_enable; /* 0x01 - enabled */
+} __attribute__ ((packed)) ng_hci_read_auth_enable_rp;
+
+#define NG_HCI_OCF_WRITE_AUTH_ENABLE		0x0020
+typedef struct {
+	u_int8_t	auth_enable; /* 0x01 - enabled */
+} __attribute__ ((packed)) ng_hci_write_auth_enable_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_auth_enable_rp;
+
+#define NG_HCI_OCF_READ_ENCRYPTION_MODE		0x0021
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;          /* 0x00 - success */
+	u_int8_t	encryption_mode; /* encryption mode */
+} __attribute__ ((packed)) ng_hci_read_encryption_mode_rp;
+
+#define NG_HCI_OCF_WRITE_ENCRYPTION_MODE	0x0022
+typedef struct {
+	u_int8_t	encryption_mode; /* encryption mode */
+} __attribute__ ((packed)) ng_hci_write_encryption_mode_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_encryption_mode_rp;
+
+#define NG_HCI_OCF_READ_UNIT_CLASS		0x0023
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;                    /* 0x00 - success */
+	u_int8_t	uclass[NG_HCI_CLASS_SIZE]; /* unit class */
+} __attribute__ ((packed)) ng_hci_read_unit_class_rp;
+
+#define NG_HCI_OCF_WRITE_UNIT_CLASS		0x0024
+typedef struct {
+	u_int8_t	uclass[NG_HCI_CLASS_SIZE]; /* unit class */
+} __attribute__ ((packed)) ng_hci_write_unit_class_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_unit_class_rp;
+
+#define NG_HCI_OCF_READ_VOICE_SETTINGS		0x0025
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;   /* 0x00 - success */
+	u_int16_t	settings; /* voice settings */
+} __attribute__ ((packed)) ng_hci_read_voice_settings_rp;
+
+#define NG_HCI_OCF_WRITE_VOICE_SETTINGS		0x0026
+typedef struct {
+	u_int16_t	settings; /* voice settings */
+} __attribute__ ((packed)) ng_hci_write_voice_settings_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_voice_settings_rp;
+
+#define NG_HCI_OCF_READ_AUTO_FLUSH_TIMO		0x0027
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_auto_flush_timo_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	timeout;    /* 0x00 - no flush, timeout * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_read_auto_flush_timo_rp;
+	
+#define NG_HCI_OCF_WRITE_AUTO_FLUSH_TIMO	0x0028
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	timeout;    /* 0x00 - no flush, timeout * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_write_auto_flush_timo_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_write_auto_flush_timo_rp;
+
+#define NG_HCI_OCF_READ_NUM_BROADCAST_RETRANS	0x0029
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	u_int8_t	counter; /* number of broadcast retransmissions */
+} __attribute__ ((packed)) ng_hci_read_num_broadcast_retrans_rp;
+
+#define NG_HCI_OCF_WRITE_NUM_BROADCAST_RETRANS	0x002a
+typedef struct {
+	u_int8_t	counter; /* number of broadcast retransmissions */
+} __attribute__ ((packed)) ng_hci_write_num_broadcast_retrans_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_num_broadcast_retrans_rp;
+
+#define NG_HCI_OCF_READ_HOLD_MODE_ACTIVITY	0x002b
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;             /* 0x00 - success */
+	u_int8_t	hold_mode_activity; /* Hold mode activities */
+} __attribute__ ((packed)) ng_hci_read_hold_mode_activity_rp;
+
+#define NG_HCI_OCF_WRITE_HOLD_MODE_ACTIVITY	0x002c
+typedef struct {
+	u_int8_t	hold_mode_activity; /* Hold mode activities */
+} __attribute__ ((packed)) ng_hci_write_hold_mode_activity_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_hold_mode_activity_rp;
+
+#define NG_HCI_OCF_READ_XMIT_LEVEL		0x002d
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	type;       /* Xmit level type */
+} __attribute__ ((packed)) ng_hci_read_xmit_level_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	char		level;      /* -30 <= level <= 30 dBm */
+} __attribute__ ((packed)) ng_hci_read_xmit_level_rp;
+
+#define NG_HCI_OCF_READ_SCO_FLOW_CONTROL	0x002e
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;       /* 0x00 - success */
+	u_int8_t	flow_control; /* 0x00 - disabled */
+} __attribute__ ((packed)) ng_hci_read_sco_flow_control_rp;
+
+#define NG_HCI_OCF_WRITE_SCO_FLOW_CONTROL	0x002f
+typedef struct {
+	u_int8_t	flow_control; /* 0x00 - disabled */
+} __attribute__ ((packed)) ng_hci_write_sco_flow_control_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_sco_flow_control_rp;
+
+#define NG_HCI_OCF_H2HC_FLOW_CONTROL		0x0031
+typedef struct {
+	u_int8_t	h2hc_flow; /* Host to Host controller flow control */
+} __attribute__ ((packed)) ng_hci_h2hc_flow_control_cp;
+
+typedef ng_hci_status_rp	ng_hci_h2hc_flow_control_rp;
+
+#define NG_HCI_OCF_HOST_BUFFER_SIZE		0x0033
+typedef struct {
+	u_int16_t	max_acl_size; /* Max. size of ACL packet (bytes) */
+	u_int8_t	max_sco_size; /* Max. size of SCO packet (bytes) */
+	u_int16_t	num_acl_pkt;  /* Max. number of ACL packets */
+	u_int16_t	num_sco_pkt;  /* Max. number of SCO packets */
+} __attribute__ ((packed)) ng_hci_host_buffer_size_cp;
+
+typedef ng_hci_status_rp	ng_hci_host_buffer_size_rp;
+
+#define NG_HCI_OCF_HOST_NUM_COMPL_PKTS		0x0035
+typedef struct {
+	u_int8_t	num_con_handles; /* # of connection handles */
+/* these are repeated "num_con_handles" times
+	u_int16_t	con_handle; --- connection handle(s)
+	u_int16_t	compl_pkt;  --- # of completed packets */
+} __attribute__ ((packed)) ng_hci_host_num_compl_pkts_cp;
+/* No return parameter(s) */
+
+#define NG_HCI_OCF_READ_LINK_SUPERVISION_TIMO	0x0036
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_link_supervision_timo_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	timeout;    /* Link supervision timeout * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_read_link_supervision_timo_rp;
+
+#define NG_HCI_OCF_WRITE_LINK_SUPERVISION_TIMO	0x0037
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	timeout;    /* Link supervision timeout * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_write_link_supervision_timo_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_write_link_supervision_timo_rp;
+
+#define NG_HCI_OCF_READ_SUPPORTED_IAC_NUM	0x0038
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	u_int8_t	num_iac; /* # of supported IAC during scan */
+} __attribute__ ((packed)) ng_hci_read_supported_iac_num_rp;
+
+#define NG_HCI_OCF_READ_IAC_LAP			0x0039
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;  /* 0x00 - success */
+	u_int8_t	num_iac; /* # of IAC */
+/* these are repeated "num_iac" times 
+	u_int8_t	laps[NG_HCI_LAP_SIZE]; --- LAPs */
+} __attribute__ ((packed)) ng_hci_read_iac_lap_rp;
+
+#define NG_HCI_OCF_WRITE_IAC_LAP		0x003a
+typedef struct {
+	u_int8_t	num_iac; /* # of IAC */
+/* these are repeated "num_iac" times 
+	u_int8_t	laps[NG_HCI_LAP_SIZE]; --- LAPs */
+} __attribute__ ((packed)) ng_hci_write_iac_lap_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_iac_lap_rp;
+
+#define NG_HCI_OCF_READ_PAGE_SCAN_PERIOD	0x003b
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;                /* 0x00 - success */
+	u_int8_t	page_scan_period_mode; /* Page scan period mode */
+} __attribute__ ((packed)) ng_hci_read_page_scan_period_rp;
+
+#define NG_HCI_OCF_WRITE_PAGE_SCAN_PERIOD	0x003c
+typedef struct {
+	u_int8_t	page_scan_period_mode; /* Page scan period mode */
+} __attribute__ ((packed)) ng_hci_write_page_scan_period_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_page_scan_period_rp;
+
+#define NG_HCI_OCF_READ_PAGE_SCAN		0x003d
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status;         /* 0x00 - success */
+	u_int8_t	page_scan_mode; /* Page scan mode */
+} __attribute__ ((packed)) ng_hci_read_page_scan_rp;
+
+#define NG_HCI_OCF_WRITE_PAGE_SCAN		0x003e
+typedef struct {
+	u_int8_t	page_scan_mode; /* Page scan mode */
+} __attribute__ ((packed)) ng_hci_write_page_scan_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_page_scan_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **           Informational commands and return parameters 
+ **     All commands in this category do not accept any parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_INFO				0x04 /* OpCode Group Field */
+
+#define NG_HCI_OCF_READ_LOCAL_VER		0x0001
+typedef struct {
+	u_int8_t	status;         /* 0x00 - success */
+	u_int8_t	hci_version;    /* HCI version */
+	u_int16_t	hci_revision;   /* HCI revision */
+	u_int8_t	lmp_version;    /* LMP version */
+	u_int16_t	manufacturer;   /* Hardware manufacturer name */
+	u_int16_t	lmp_subversion; /* LMP sub-version */
+} __attribute__ ((packed)) ng_hci_read_local_ver_rp;
+
+#define NG_HCI_OCF_READ_LOCAL_FEATURES		0x0003
+typedef struct {
+	u_int8_t	status;                         /* 0x00 - success */
+	u_int8_t	features[NG_HCI_FEATURES_SIZE]; /* LMP features bitmsk*/
+} __attribute__ ((packed)) ng_hci_read_local_features_rp;
+
+#define NG_HCI_OCF_READ_BUFFER_SIZE		0x0005
+typedef struct {
+	u_int8_t	status;       /* 0x00 - success */
+	u_int16_t	max_acl_size; /* Max. size of ACL packet (bytes) */
+	u_int8_t	max_sco_size; /* Max. size of SCO packet (bytes) */
+	u_int16_t	num_acl_pkt;  /* Max. number of ACL packets */
+	u_int16_t	num_sco_pkt;  /* Max. number of SCO packets */
+} __attribute__ ((packed)) ng_hci_read_buffer_size_rp;
+
+#define NG_HCI_OCF_READ_COUNTRY_CODE		0x0007
+typedef struct {
+	u_int8_t	status;       /* 0x00 - success */
+	u_int8_t	country_code; /* 0x00 - NAM, EUR, JP; 0x01 - France */
+} __attribute__ ((packed)) ng_hci_read_country_code_rp;
+
+#define NG_HCI_OCF_READ_BDADDR			0x0009
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* unit address */
+} __attribute__ ((packed)) ng_hci_read_bdaddr_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **            Status commands and return parameters 
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_STATUS			0x05 /* OpCode Group Field */
+
+#define NG_HCI_OCF_READ_FAILED_CONTACT_CNTR	0x0001
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_failed_contact_cntr_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	counter;    /* number of consecutive failed contacts */
+} __attribute__ ((packed)) ng_hci_read_failed_contact_cntr_rp;
+
+#define NG_HCI_OCF_RESET_FAILED_CONTACT_CNTR	0x0002
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_reset_failed_contact_cntr_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_reset_failed_contact_cntr_rp;
+
+#define NG_HCI_OCF_GET_LINK_QUALITY		0x0003
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_get_link_quality_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	quality;    /* higher value means better quality */
+} __attribute__ ((packed)) ng_hci_get_link_quality_rp;
+
+#define NG_HCI_OCF_READ_RSSI			0x0005
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_read_rssi_cp;
+
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	char		rssi;       /* -127 <= rssi <= 127 dB */
+} __attribute__ ((packed)) ng_hci_read_rssi_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **             Testing commands and return parameters 
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_TESTING			0x06 /* OpCode Group Field */
+
+#define NG_HCI_OCF_READ_LOOPBACK_MODE		0x0001
+/* No command parameter(s) */
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	u_int8_t	lbmode; /* loopback mode */
+} __attribute__ ((packed)) ng_hci_read_loopback_mode_rp;
+
+#define NG_HCI_OCF_WRITE_LOOPBACK_MODE		0x0002
+typedef struct {
+	u_int8_t	lbmode; /* loopback mode */
+} __attribute__ ((packed)) ng_hci_write_loopback_mode_cp;
+
+typedef ng_hci_status_rp	ng_hci_write_loopback_mode_rp;
+
+#define NG_HCI_OCF_ENABLE_UNIT_UNDER_TEST	0x0003
+/* No command parameter(s) */
+typedef ng_hci_status_rp	ng_hci_enable_unit_under_test_rp;
+
+/**************************************************************************
+ **************************************************************************
+ **                Special HCI OpCode group field values
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_OGF_BT_LOGO			0x3e	
+
+#define NG_HCI_OGF_VENDOR			0x3f
+
+/**************************************************************************
+ **************************************************************************
+ **                         Events and event parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NG_HCI_EVENT_INQUIRY_COMPL		0x01
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+} __attribute__ ((packed)) ng_hci_inquiry_compl_ep;
+
+#define NG_HCI_EVENT_INQUIRY_RESULT		0x02
+typedef struct {
+	u_int8_t	num_responses;      /* number of responses */
+/* these are repeated "num_responses" times 
+	bdaddr_t	bdaddr;                    --- unit address(es)
+	u_int8_t	page_scan_rep_mode;        --- page scan rep. mode(s) 
+	u_int8_t	page_scan_period_mode;     --- page scan period mode(s) 
+	u_int8_t	page_scan_mode;            --- page scan mode(s) 
+	u_int8_t	uclass[NG_HCI_CLASS_SIZE]; --- unit class(es) 
+	u_int16_t	clock_offset;              --- clock offset(s) */
+} __attribute__ ((packed)) ng_hci_inquiry_result_ep;
+
+#define NG_HCI_EVENT_CON_COMPL			0x03
+typedef struct {
+	u_int8_t	status;          /* 0x00 - success */
+	u_int16_t	con_handle;      /* Connection handle */
+	bdaddr_t	bdaddr;          /* remote unit address */
+	u_int8_t	link_type;       /* Link type */
+	u_int8_t	encryption_mode; /* Encryption mode */
+} __attribute__ ((packed)) ng_hci_con_compl_ep;
+
+#define NG_HCI_EVENT_CON_REQ			0x04
+typedef struct {
+	bdaddr_t	bdaddr;                    /* remote unit address */
+	u_int8_t	uclass[NG_HCI_CLASS_SIZE]; /* remote unit class */
+	u_int8_t	link_type;                 /* link type */
+} __attribute__ ((packed)) ng_hci_con_req_ep;
+
+#define NG_HCI_EVENT_DISCON_COMPL		0x05
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	reason;     /* reason to disconnect */
+} __attribute__ ((packed)) ng_hci_discon_compl_ep;
+
+#define NG_HCI_EVENT_AUTH_COMPL			0x06
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_auth_compl_ep;
+
+#define NG_HCI_EVENT_REMOTE_NAME_REQ_COMPL	0x7
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* remote unit address */
+	char		name[NG_HCI_UNIT_NAME_SIZE]; /* remote unit name */
+} __attribute__ ((packed)) ng_hci_remote_name_req_compl_ep;
+
+#define NG_HCI_EVENT_ENCRYPTION_CHANGE		0x08
+typedef struct {
+	u_int8_t	status;            /* 0x00 - success */
+	u_int16_t	con_handle;        /* Connection handle */
+	u_int8_t	encryption_enable; /* 0x00 - disable */
+} __attribute__ ((packed)) ng_hci_encryption_change_ep;
+
+#define NG_HCI_EVENT_CHANGE_CON_LINK_KEY_COMPL	0x09
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* Connection handle */
+} __attribute__ ((packed)) ng_hci_change_con_link_key_compl_ep;
+
+#define NG_HCI_EVENT_MASTER_LINK_KEY_COMPL	0x0a
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* Connection handle */
+	u_int8_t	key_flag;   /* Key flag */
+} __attribute__ ((packed)) ng_hci_master_link_key_compl_ep;
+
+#define NG_HCI_EVENT_READ_REMOTE_FEATURES_COMPL	0x0b
+typedef struct {
+	u_int8_t	status;                         /* 0x00 - success */
+	u_int16_t	con_handle;                     /* Connection handle */
+	u_int8_t	features[NG_HCI_FEATURES_SIZE]; /* LMP features bitmsk*/
+} __attribute__ ((packed)) ng_hci_read_remote_features_compl_ep;
+
+#define NG_HCI_EVENT_READ_REMOTE_VER_INFO_COMPL	0x0c
+typedef struct {
+	u_int8_t	status;         /* 0x00 - success */
+	u_int16_t	con_handle;     /* Connection handle */
+	u_int8_t	lmp_version;    /* LMP version */
+	u_int16_t	manufacturer;   /* Hardware manufacturer name */
+	u_int16_t	lmp_subversion; /* LMP sub-version */
+} __attribute__ ((packed)) ng_hci_read_remote_ver_info_compl_ep;
+
+#define NG_HCI_EVENT_QOS_SETUP_COMPL		0x0d
+typedef struct {
+	u_int8_t	status;          /* 0x00 - success */
+	u_int16_t	con_handle;      /* connection handle */
+	u_int8_t	flags;           /* reserved for future use */
+	u_int8_t	service_type;    /* service type */
+	u_int32_t	token_rate;      /* bytes per second */
+	u_int32_t	peak_bandwidth;  /* bytes per second */
+	u_int32_t	latency;         /* microseconds */
+	u_int32_t	delay_variation; /* microseconds */
+} __attribute__ ((packed)) ng_hci_qos_setup_compl_ep;
+
+#define NG_HCI_EVENT_COMMAND_COMPL		0x0e
+typedef struct {
+	u_int8_t	num_cmd_pkts; /* # of HCI command packets */
+	u_int16_t	opcode;       /* command OpCode */
+	/* command return parameters (if any) */
+} __attribute__ ((packed)) ng_hci_command_compl_ep;
+
+#define NG_HCI_EVENT_COMMAND_STATUS		0x0f
+typedef struct {
+	u_int8_t	status;       /* 0x00 - pending */
+	u_int8_t	num_cmd_pkts; /* # of HCI command packets */
+	u_int16_t	opcode;       /* command OpCode */
+} __attribute__ ((packed)) ng_hci_command_status_ep;
+
+#define NG_HCI_EVENT_HARDWARE_ERROR		0x10
+typedef struct {
+	u_int8_t	hardware_code; /* hardware error code */
+} __attribute__ ((packed)) ng_hci_hardware_error_ep;
+
+#define NG_HCI_EVENT_FLUSH_OCCUR		0x11
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_flush_occur_ep;
+
+#define NG_HCI_EVENT_ROLE_CHANGE		0x12
+typedef struct {
+	u_int8_t	status; /* 0x00 - success */
+	bdaddr_t	bdaddr; /* address of remote unit */
+	u_int8_t	role;   /* new connection role */
+} __attribute__ ((packed)) ng_hci_role_change_ep;
+
+#define NG_HCI_EVENT_NUM_COMPL_PKTS		0x13
+typedef struct {
+	u_int8_t	num_con_handles; /* # of connection handles */
+/* these are repeated "num_con_handles" times 
+	u_int16_t	con_handle; --- connection handle(s)
+	u_int16_t	compl_pkt;  --- # of completed packets */
+} __attribute__ ((packed)) ng_hci_num_compl_pkts_ep;
+
+#define NG_HCI_EVENT_MODE_CHANGE		0x14
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int8_t	unit_mode;  /* remote unit mode */
+	u_int16_t	interval;   /* interval * 0.625 msec */
+} __attribute__ ((packed)) ng_hci_mode_change_ep;
+
+#define NG_HCI_EVENT_RETURN_LINK_KEYS		0x15
+typedef struct {
+	u_int8_t	num_keys; /* # of keys */
+/* these are repeated "num_keys" times 
+	bdaddr_t	bdaddr;               --- remote address(es)
+	u_int8_t	key[NG_HCI_KEY_SIZE]; --- key(s) */
+} __attribute__ ((packed)) ng_hci_return_link_keys_ep;
+
+#define NG_HCI_EVENT_PIN_CODE_REQ		0x16
+typedef struct {
+	bdaddr_t	bdaddr; /* remote unit address */
+} __attribute__ ((packed)) ng_hci_pin_code_req_ep;
+
+#define NG_HCI_EVENT_LINK_KEY_REQ		0x17
+typedef struct {
+	bdaddr_t	bdaddr; /* remote unit address */
+} __attribute__ ((packed)) ng_hci_link_key_req_ep;
+
+#define NG_HCI_EVENT_LINK_KEY_NOTIFICATION	0x18
+typedef struct {
+	bdaddr_t	bdaddr;               /* remote unit address */
+	u_int8_t	key[NG_HCI_KEY_SIZE]; /* link key */
+	u_int8_t	key_type;             /* type of the key */
+} __attribute__ ((packed)) ng_hci_link_key_notification_ep;
+
+#define NG_HCI_EVENT_LOOPBACK_COMMAND		0x19
+typedef struct {
+	u_int8_t	command[0]; /* Command packet */
+} __attribute__ ((packed)) ng_hci_loopback_command_ep;
+
+#define NG_HCI_EVENT_DATA_BUFFER_OVERFLOW	0x1a
+typedef struct {
+	u_int8_t	link_type; /* Link type */
+} __attribute__ ((packed)) ng_hci_data_buffer_overflow_ep;
+
+#define NG_HCI_EVENT_MAX_SLOT_CHANGE		0x1b
+typedef struct {
+	u_int16_t	con_handle;    /* connection handle */
+	u_int8_t	lmp_max_slots; /* Max. # of slots allowed */
+} __attribute__ ((packed)) ng_hci_max_slot_change_ep;
+
+#define NG_HCI_EVENT_READ_CLOCK_OFFSET_COMPL	0x1c
+typedef struct {
+	u_int8_t	status;       /* 0x00 - success */
+	u_int16_t	con_handle;   /* Connection handle */
+	u_int16_t	clock_offset; /* Clock offset */
+} __attribute__ ((packed)) ng_hci_read_clock_offset_compl_ep;
+
+#define NG_HCI_EVENT_CON_PKT_TYPE_CHANGED	0x1d
+typedef struct {
+	u_int8_t	status;     /* 0x00 - success */
+	u_int16_t	con_handle; /* connection handle */
+	u_int16_t	pkt_type;   /* packet type */
+} __attribute__ ((packed)) ng_hci_con_pkt_type_changed_ep;
+
+#define NG_HCI_EVENT_QOS_VIOLATION		0x1e
+typedef struct {
+	u_int16_t	con_handle; /* connection handle */
+} __attribute__ ((packed)) ng_hci_qos_violation_ep;
+
+#define NG_HCI_EVENT_PAGE_SCAN_MODE_CHANGE	0x1f
+typedef struct {
+	bdaddr_t	bdaddr;         /* destination address */
+	u_int8_t	page_scan_mode; /* page scan mode */
+} __attribute__ ((packed)) ng_hci_page_scan_mode_change_ep;
+
+#define NG_HCI_EVENT_PAGE_SCAN_REP_MODE_CHANGE	0x20
+typedef struct {
+	bdaddr_t	bdaddr;             /* destination address */
+	u_int8_t	page_scan_rep_mode; /* page scan repetition mode */
+} __attribute__ ((packed)) ng_hci_page_scan_rep_mode_change_ep;
+
+#define NG_HCI_EVENT_BT_LOGO			0xfe
+
+#define NG_HCI_EVENT_VENDOR			0xff
+
+#endif /* ndef _NETGRAPH_HCI_H_ */
diff --git a/sys/netgraph/bluetooth/include/ng_l2cap.h b/sys/netgraph/bluetooth/include/ng_l2cap.h
new file mode 100644
index 0000000..e277c21
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_l2cap.h
@@ -0,0 +1,655 @@
+/*
+ * ng_l2cap.h
+ *
+ * Copyright (c) Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_l2cap.h,v 1.13 2002/09/08 23:35:51 max Exp $
+ * $FreeBSD$
+ */
+
+/*
+ * This file contains everything that application needs to know about
+ * Link Layer Control and Adaptation Protocol (L2CAP). All information 
+ * was obtained from Bluetooth Specification Book v1.1.
+ *
+ * This file can be included by both kernel and userland applications.
+ */
+
+#ifndef _NETGRAPH_L2CAP_H_
+#define _NETGRAPH_L2CAP_H_
+
+/**************************************************************************
+ **************************************************************************
+ **     Netgraph node hook name, type name and type cookie and commands
+ **************************************************************************
+ **************************************************************************/
+
+/* Netgraph node hook names */
+#define NG_L2CAP_HOOK_HCI		"hci"	/* HCI   <-> L2CAP */
+#define NG_L2CAP_HOOK_L2C		"l2c"	/* L2CAP <-> Upper */
+#define NG_L2CAP_HOOK_CTL		"ctl"	/* L2CAP <-> User  */ 
+
+/* Node type name and type cookie */
+#define NG_L2CAP_NODE_TYPE		"l2cap"
+#define NGM_L2CAP_COOKIE		1000774185
+
+/**************************************************************************
+ **************************************************************************
+ **                   Common defines and types (L2CAP)
+ **************************************************************************
+ **************************************************************************/
+
+/*
+ * Channel IDs are assigned relative to the instance of L2CAP node, i.e.
+ * relative to the unit. So the total number of channels that unit can have
+ * open at the same time is 0xffff - 0x0040 = 0xffbf (65471). This number
+ * does not depend on number of connections.
+ */
+
+#define NG_L2CAP_NULL_CID	0x0000	/* DO NOT USE THIS CID */
+#define NG_L2CAP_SIGNAL_CID	0x0001	/* signaling channel ID */
+#define NG_L2CAP_CLT_CID	0x0002	/* connectionless channel ID */
+	/* 0x0003 - 0x003f Reserved */
+#define NG_L2CAP_FIRST_CID	0x0040	/* dynamically alloc. (start) */
+#define NG_L2CAP_LAST_CID	0xffff	/* dynamically alloc. (end) */
+
+/* L2CAP MTU */
+#define NG_L2CAP_MTU_MINIMUM		48
+#define NG_L2CAP_MTU_DEFAULT		672
+#define NG_L2CAP_MTU_MAXIMUM		0xffff
+
+/* L2CAP flush and link timeouts */
+#define NG_L2CAP_FLUSH_TIMO_DEFAULT	0xffff /* always retransmit */
+#define NG_L2CAP_LINK_TIMO_DEFAULT	0xffff
+
+/* L2CAP Command Reject reasons */
+#define NG_L2CAP_REJ_NOT_UNDERSTOOD	0x0000
+#define NG_L2CAP_REJ_MTU_EXCEEDED	0x0001
+#define NG_L2CAP_REJ_INVALID_CID	0x0002
+/* 0x0003 - 0xffff - reserved for future use */
+
+/* Protocol/Service Multioplexor (PSM) values */
+#define NG_L2CAP_PSM_ANY		0x0000	/* Any/Invalid PSM */
+#define NG_L2CAP_PSM_SDP		0x0001	/* Service Discovery Protocol */
+#define NG_L2CAP_PSM_RFCOMM		0x0003	/* RFCOMM protocol */
+#define NG_L2CAP_PSM_TCP		0x0005	/* Telephony Control Protocol */
+/* 0x0006 - 0x1000 - reserved for future use */
+
+/* L2CAP Connection response command result codes */
+#define NG_L2CAP_SUCCESS		0x0000
+#define NG_L2CAP_PENDING		0x0001
+#define NG_L2CAP_PSM_NOT_SUPPORTED	0x0002
+#define NG_L2CAP_SEQUIRY_BLOCK		0x0003
+#define NG_L2CAP_NO_RESOURCES		0x0004
+#define NG_L2CAP_TIMEOUT		0xeeee
+#define NG_L2CAP_UNKNOWN		0xffff
+/* 0x0005 - 0xffff - reserved for future use */
+
+/* L2CAP Connection response status codes */
+#define NG_L2CAP_NO_INFO		0x0000
+#define NG_L2CAP_AUTH_PENDING		0x0001
+#define NG_L2CAP_AUTZ_PENDING		0x0002
+/* 0x0003 - 0xffff - reserved for future use */
+
+/* L2CAP Configuration response result codes */
+#define NG_L2CAP_UNACCEPTABLE_PARAMS	0x0001
+#define NG_L2CAP_REJECT			0x0002
+#define NG_L2CAP_UNKNOWN_OPTION		0x0003
+/* 0x0003 - 0xffff - reserved for future use */
+
+/* L2CAP Configuration options */
+#define NG_L2CAP_OPT_CFLAG_BIT		0x0001
+#define NG_L2CAP_OPT_CFLAG(flags)	((flags) & NG_L2CAP_OPT_CFLAG_BIT)
+#define NG_L2CAP_OPT_HINT_BIT		0x80
+#define NG_L2CAP_OPT_HINT(type)		((type) & NG_L2CAP_OPT_HINT_BIT)
+#define NG_L2CAP_OPT_HINT_MASK		0x7f
+#define NG_L2CAP_OPT_MTU		0x01
+#define NG_L2CAP_OPT_MTU_SIZE		sizeof(u_int16_t)
+#define NG_L2CAP_OPT_FLUSH_TIMO		0x02
+#define NG_L2CAP_OPT_FLUSH_TIMO_SIZE	sizeof(u_int16_t)
+#define NG_L2CAP_OPT_QOS		0x03
+#define NG_L2CAP_OPT_QOS_SIZE		sizeof(ng_l2cap_flow_t)
+/* 0x4 - 0xff - reserved for future use */
+
+/* L2CAP Information request type codes */
+#define NG_L2CAP_CONNLESS_MTU		0x0001
+/* 0x0002 - 0xffff - reserved for future use */
+
+/* L2CAP Information response codes */
+#define NG_L2CAP_NOT_SUPPORTED		0x0001
+/* 0x0002 - 0xffff - reserved for future use */
+
+/* L2CAP flow control */
+typedef struct {
+	u_int8_t	flags;             /* reserved for future use */
+	u_int8_t	service_type;      /* service type */
+	u_int32_t	token_rate;        /* bytes per second */
+	u_int32_t	token_bucket_size; /* bytes */
+	u_int32_t	peak_bandwidth;    /* bytes per second */
+	u_int32_t	latency;           /* microseconds */
+	u_int32_t	delay_variation;   /* microseconds */
+} __attribute__ ((packed)) ng_l2cap_flow_t;
+typedef ng_l2cap_flow_t *	ng_l2cap_flow_p;
+
+/**************************************************************************
+ **************************************************************************
+ **                 Link level defines, headers and types
+ **************************************************************************
+ **************************************************************************/
+
+/* L2CAP header */
+typedef struct {
+	u_int16_t	length;	/* payload size */
+	u_int16_t	dcid;	/* destination channel ID */
+} __attribute__ ((packed)) ng_l2cap_hdr_t;
+
+/* L2CAP ConnectionLess Traffic (CLT) (if destination cid == 0x2) */
+typedef struct {
+	u_int16_t	psm; /* Protocol/Service Multiplexor */
+} __attribute__ ((packed)) ng_l2cap_clt_hdr_t;
+
+#define NG_L2CAP_CLT_MTU_MAXIMUM \
+	(NG_L2CAP_MTU_MAXIMUM - sizeof(ng_l2cap_clt_hdr_t))
+
+/* L2CAP command header */
+typedef struct {
+	u_int8_t	code;   /* command OpCode */
+	u_int8_t	ident;  /* identifier to match request and response */
+	u_int16_t	length; /* command parameters length */
+} __attribute__ ((packed)) ng_l2cap_cmd_hdr_t;
+
+/* L2CAP Command Reject */
+#define NG_L2CAP_CMD_REJ	0x01
+typedef struct {
+	u_int16_t	reason; /* reason to reject command */
+/*	u_int8_t	data[]; -- optional data (depends on reason) */
+} __attribute__ ((packed)) ng_l2cap_cmd_rej_cp;
+
+/* CommandReject data */
+typedef union {
+ 	/* NG_L2CAP_REJ_MTU_EXCEEDED */
+	struct {
+		u_int16_t	mtu; /* actual signaling MTU */
+	} __attribute__ ((packed)) mtu;
+	/* NG_L2CAP_REJ_INVALID_CID */
+	struct {
+		u_int16_t	scid; /* local CID */
+		u_int16_t	dcid; /* remote CID */
+	} __attribute__ ((packed)) cid;
+} ng_l2cap_cmd_rej_data_t;
+typedef ng_l2cap_cmd_rej_data_t * ng_l2cap_cmd_rej_data_p;
+
+/* L2CAP Connection Request */
+#define NG_L2CAP_CON_REQ	0x02
+typedef struct {
+	u_int16_t	psm;  /* Protocol/Service Multiplexor (PSM) */
+	u_int16_t	scid; /* source channel ID */
+} __attribute__ ((packed)) ng_l2cap_con_req_cp;
+
+/* L2CAP Connection Response */
+#define NG_L2CAP_CON_RSP	0x03
+typedef struct {
+	u_int16_t	dcid;   /* destination channel ID */
+	u_int16_t	scid;   /* source channel ID */
+	u_int16_t	result; /* 0x00 - success */
+	u_int16_t	status; /* more info if result != 0x00 */
+} __attribute__ ((packed)) ng_l2cap_con_rsp_cp;
+
+/* L2CAP Configuration Request */
+#define NG_L2CAP_CFG_REQ	0x04
+typedef struct {
+	u_int16_t	dcid;  /* destination channel ID */
+	u_int16_t	flags; /* flags */
+/*	u_int8_t	options[] --  options */
+} __attribute__ ((packed)) ng_l2cap_cfg_req_cp;
+
+/* L2CAP Configuration Response */
+#define NG_L2CAP_CFG_RSP	0x05
+typedef struct {
+	u_int16_t	scid;   /* source channel ID */
+	u_int16_t	flags;  /* flags */
+	u_int16_t	result; /* 0x00 - success */
+/*	u_int8_t	options[] -- options */
+} __attribute__ ((packed)) ng_l2cap_cfg_rsp_cp;
+
+/* L2CAP configuration option */
+typedef struct {
+	u_int8_t	type;
+	u_int8_t	length;
+/*	u_int8_t	value[] -- option value (depends on type) */
+} __attribute__ ((packed)) ng_l2cap_cfg_opt_t;
+typedef ng_l2cap_cfg_opt_t * ng_l2cap_cfg_opt_p;
+
+/* L2CAP configuration option value */
+typedef union {
+	u_int16_t		mtu;		/* NG_L2CAP_OPT_MTU */
+	u_int16_t		flush_timo;	/* NG_L2CAP_OPT_FLUSH_TIMO */
+	ng_l2cap_flow_t		flow;		/* NG_L2CAP_OPT_QOS */
+} ng_l2cap_cfg_opt_val_t;
+typedef ng_l2cap_cfg_opt_val_t * ng_l2cap_cfg_opt_val_p;
+
+/* L2CAP Disconnect Request */
+#define NG_L2CAP_DISCON_REQ	0x06
+typedef struct {
+	u_int16_t	dcid; /* destination channel ID */
+	u_int16_t	scid; /* source channel ID */
+} __attribute__ ((packed)) ng_l2cap_discon_req_cp;
+
+/* L2CAP Disconnect Response */
+#define NG_L2CAP_DISCON_RSP	0x07
+typedef ng_l2cap_discon_req_cp	ng_l2cap_discon_rsp_cp;
+
+/* L2CAP Echo Request */
+#define NG_L2CAP_ECHO_REQ	0x08
+/* No command parameters, only optional data */
+
+/* L2CAP Echo Response */
+#define NG_L2CAP_ECHO_RSP	0x09
+#define NG_L2CAP_MAX_ECHO_SIZE \
+	(NG_L2CAP_MTU_MAXIMUM - sizeof(ng_l2cap_cmd_hdr_t))
+/* No command parameters, only optional data */
+
+/* L2CAP Information Request */
+#define NG_L2CAP_INFO_REQ	0x0a
+typedef struct {
+	u_int16_t	type; /* requested information type */
+} __attribute__ ((packed)) ng_l2cap_info_req_cp;
+
+/* L2CAP Information Response */
+#define NG_L2CAP_INFO_RSP	0x0b
+typedef struct {
+	u_int16_t	type;   /* requested information type */
+	u_int16_t	result; /* 0x00 - success */
+/*	u_int8_t	info[]  -- info data (depends on type)
+ *
+ * NG_L2CAP_CONNLESS_MTU - 2 bytes connectionless MTU
+ */
+} __attribute__ ((packed)) ng_l2cap_info_rsp_cp;
+
+typedef union {
+ 	/* NG_L2CAP_CONNLESS_MTU */
+	struct {
+		u_int16_t	mtu;
+	} __attribute__ ((packed)) mtu;
+} ng_l2cap_info_rsp_data_t;
+typedef ng_l2cap_info_rsp_data_t *	ng_l2cap_info_rsp_data_p;
+
+/**************************************************************************
+ **************************************************************************
+ **        Upper layer protocol interface. L2CA_xxx messages 
+ **************************************************************************
+ **************************************************************************/
+
+/*
+ * NOTE! NOTE! NOTE!
+ *
+ * Bluetooth specification says that L2CA_xxx request must block until
+ * response is ready. We are not allowed to block in Netgraph, so we 
+ * need to queue request and save some information that can be used 
+ * later and help match request and response.
+ *
+ * The idea is to use "token" field from Netgraph message header. The
+ * upper layer protocol _MUST_ populate "token". L2CAP will queue request
+ * (using L2CAP command descriptor) and start processing. Later, when
+ * response is ready or timeout has occur L2CAP layer will create new 
+ * Netgraph message, set "token" and RESP flag and send the message to
+ * the upper layer protocol. 
+ *
+ * L2CA_xxx_Ind messages _WILL_NOT_ populate "token" and _WILL_NOT_
+ * set RESP flag. There is no reason for this, because they are just
+ * notifications and do not require acknowlegment.
+ *
+ * NOTE: This is _NOT_ what NG_MKRESPONSE and NG_RESPOND_MSG do, however
+ *       it is somewhat similar.
+ */
+
+/* L2CA data packet header */
+typedef struct {
+	u_int32_t	token;	/* token to use in L2CAP_L2CA_WRITE */
+	u_int16_t	length;	/* length of the data */
+	u_int16_t	lcid;	/* local channel ID */
+} __attribute__ ((packed)) ng_l2cap_l2ca_hdr_t;
+
+/* L2CA_Connect */
+#define NGM_L2CAP_L2CA_CON		0x80
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	psm;    /* Protocol/Service Multiplexor */
+	bdaddr_t	bdaddr;	/* remote unit address */
+} ng_l2cap_l2ca_con_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	lcid;   /* local channel ID */
+	u_int16_t	result; /* 0x00 - success */
+	u_int16_t	status; /* if result != 0x00 */
+} ng_l2cap_l2ca_con_op;
+
+/* L2CA_ConnectInd */
+#define NGM_L2CAP_L2CA_CON_IND		0x81
+/* L2CAP -> Upper */
+typedef struct {
+	bdaddr_t	bdaddr; /* remote unit address */
+	u_int16_t	lcid;   /* local channel ID */
+	u_int16_t	psm;    /* Procotol/Service Multiplexor */
+	u_int8_t	ident;  /* indentifier */
+	u_int8_t	unused; /* place holder */
+} ng_l2cap_l2ca_con_ind_ip;
+/* No output parameters */
+
+/* L2CA_ConnectRsp */
+#define NGM_L2CAP_L2CA_CON_RSP		0x82
+/* Upper -> L2CAP */
+typedef struct {
+	bdaddr_t	bdaddr; /* remote unit address */
+	u_int8_t	ident;  /* "ident" from L2CAP_ConnectInd event */
+	u_int8_t	unused; /* place holder */
+	u_int16_t	lcid;   /* local channel ID */
+	u_int16_t	result; /* 0x00 - success */ 
+	u_int16_t	status; /* if response != 0x00 */ 
+} ng_l2cap_l2ca_con_rsp_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result; /* 0x00 - success */
+} ng_l2cap_l2ca_con_rsp_op;
+
+/* L2CA_Config */
+#define NGM_L2CAP_L2CA_CFG		0x83
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;        /* local channel ID */
+	u_int16_t	imtu;        /* receiving MTU for the local channel */
+	ng_l2cap_flow_t	oflow;       /* out flow */
+	u_int16_t	flush_timo;  /* flush timeout (msec) */
+	u_int16_t	link_timo;   /* link timeout (msec) */
+} ng_l2cap_l2ca_cfg_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result;      /* 0x00 - success */
+	u_int16_t	imtu;        /* sending MTU for the remote channel */
+	ng_l2cap_flow_t	oflow;       /* out flow */
+	u_int16_t	flush_timo;  /* flush timeout (msec) */
+} ng_l2cap_l2ca_cfg_op;
+
+/* L2CA_ConfigRsp */
+#define NGM_L2CAP_L2CA_CFG_RSP		0x84
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;  /* local channel ID */
+	u_int16_t	omtu;  /* sending MTU for the local channel */
+	ng_l2cap_flow_t	iflow; /* in FLOW */
+} ng_l2cap_l2ca_cfg_rsp_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result; /* 0x00 - sucsess */
+} ng_l2cap_l2ca_cfg_rsp_op;
+
+/* L2CA_ConfigInd */
+#define NGM_L2CAP_L2CA_CFG_IND		0x85
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	lcid;        /* local channel ID */
+	u_int16_t	omtu;        /* outgoing MTU for the local channel */
+	ng_l2cap_flow_t	iflow;       /* in flow */
+	u_int16_t	flush_timo;  /* flush timeout (msec) */
+} ng_l2cap_l2ca_cfg_ind_ip;
+/* No output parameters */
+
+/* L2CA_QoSViolationInd */
+#define NGM_L2CAP_L2CA_QOS_IND		0x86
+/* L2CAP -> Upper */
+typedef struct {
+	bdaddr_t	bdaddr;	/* remote unit address */
+} ng_l2cap_l2ca_qos_ind_ip;
+/* No output parameters */
+
+/* L2CA_Disconnect */
+#define NGM_L2CAP_L2CA_DISCON		0x87
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;  /* local channel ID */
+} ng_l2cap_l2ca_discon_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result; /* 0x00 - sucsess */
+} ng_l2cap_l2ca_discon_op;
+
+/* L2CA_DisconnectInd */
+#define NGM_L2CAP_L2CA_DISCON_IND	0x88
+/* L2CAP -> Upper */
+typedef ng_l2cap_l2ca_discon_ip ng_l2cap_l2ca_discon_ind_ip;
+/* No output parameters */
+
+/* L2CA_Write response */
+#define NGM_L2CAP_L2CA_WRITE		0x89
+/* No input parameters */
+
+/* L2CAP -> Upper */
+typedef struct {
+	int		result;	/* result (0x00 - success) */
+	u_int16_t	length;	/* amount of data written */
+	u_int16_t	lcid;	/* local channel ID */
+} ng_l2cap_l2ca_write_op;
+
+/* L2CA_GroupCreate */
+#define NGM_L2CAP_L2CA_GRP_CREATE	0x8a
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	psm;   /* Protocol/Service Multiplexor */
+} ng_l2cap_l2ca_grp_create_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	lcid;  /* local group channel ID */
+} ng_l2cap_l2ca_grp_create_op;
+
+/* L2CA_GroupClose */
+#define NGM_L2CAP_L2CA_GRP_CLOSE	0x8b
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;  /* local group channel ID */
+} ng_l2cap_l2ca_grp_close_ip;
+
+#if 0
+/* L2CAP -> Upper */
+ * typedef struct {
+ * 	u_int16_t	result; /* 0x00 - success */
+ * } ng_l2cap_l2ca_grp_close_op;
+#endif
+
+/* L2CA_GroupAddMember */
+#define NGM_L2CAP_L2CA_GRP_ADD_MEMBER	0x8c
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;   /* local group channel ID */
+	bdaddr_t	bdaddr; /* remote unit address */
+} ng_l2cap_l2ca_grp_add_member_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result; /* 0x00 - success */
+} ng_l2cap_l2ca_grp_add_member_op;
+
+/* L2CA_GroupRemoveMember */
+#define NGM_L2CAP_L2CA_GRP_REM_MEMBER	0x8d
+/* Upper -> L2CAP */
+typedef ng_l2cap_l2ca_grp_add_member_ip	ng_l2cap_l2ca_grp_rem_member_ip;
+
+/* L2CAP -> Upper */
+#if 0
+ * typedef ng_l2cap_l2ca_grp_add_member_op	ng_l2cap_l2ca_grp_rem_member_op;
+#endif
+
+/* L2CA_GroupMembeship */
+#define NGM_L2CAP_L2CA_GRP_MEMBERSHIP	0x8e
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	lcid;  /* local group channel ID */
+} ng_l2cap_l2ca_grp_get_members_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result;   /* 0x00 - success */
+	u_int16_t	nmembers; /* number of group members */
+/*	bdaddr_t	members[] -- group memebers */
+} ng_l2cap_l2ca_grp_get_members_op;
+
+/* L2CA_Ping */
+#define NGM_L2CAP_L2CA_PING		0x8f
+/* Upper -> L2CAP */
+typedef struct {
+	bdaddr_t	bdaddr;    /* remote unit address */
+	u_int16_t	echo_size; /* size of echo data in bytes */
+/*	u_int8_t	echo_data[] -- echo data */
+} ng_l2cap_l2ca_ping_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result;    /* 0x00 - success */
+	bdaddr_t	bdaddr;    /* remote unit address */
+	u_int16_t	echo_size; /* size of echo data in bytes */
+/*	u_int8_t	echo_data[] -- echo data */
+} ng_l2cap_l2ca_ping_op;
+
+/* L2CA_GetInfo */
+#define NGM_L2CAP_L2CA_GET_INFO		0x90
+/* Upper -> L2CAP */
+typedef struct {
+	bdaddr_t	bdaddr;	   /* remote unit address */
+	u_int16_t	info_type; /* info type */
+} ng_l2cap_l2ca_get_info_ip;
+
+/* L2CAP -> Upper */
+typedef struct {
+	u_int16_t	result;    /* 0x00 - success */
+	u_int16_t	info_size; /* size of info data in bytes */
+/*	u_int8_t	info_data[] -- info data */
+} ng_l2cap_l2ca_get_info_op;
+
+/* L2CA_EnableCLT/L2CA_DisableCLT */
+#define NGM_L2CAP_L2CA_ENABLE_CLT	0x91
+/* Upper -> L2CAP */
+typedef struct {
+	u_int16_t	psm;    /* Protocol/Service Multiplexor */
+	u_int16_t	enable; /* 0x00 - disable */
+} ng_l2cap_l2ca_enable_clt_ip;
+
+#if 0
+/* L2CAP -> Upper */
+ * typedef struct {
+ * 	u_int16_t	result; /* 0x00 - success */
+ * } ng_l2cap_l2ca_enable_clt_op;
+#endif
+
+/**************************************************************************
+ **************************************************************************
+ **                          L2CAP node messages
+ **************************************************************************
+ **************************************************************************/
+
+/* L2CAP connection states */
+#define NG_L2CAP_CON_CLOSED		0	/* connection closed */
+#define NG_L2CAP_W4_LP_CON_CFM		1	/* waiting... */
+#define NG_L2CAP_CON_OPEN		2	/* connection open */
+
+/* L2CAP channel states */
+#define NG_L2CAP_CLOSED			0	/* channel closed */
+#define NG_L2CAP_W4_L2CAP_CON_RSP	1	/* wait for L2CAP resp. */
+#define NG_L2CAP_W4_L2CA_CON_RSP	2	/* wait for upper resp. */
+#define NG_L2CAP_CONFIG			3	/* L2CAP configuration */
+#define NG_L2CAP_OPEN			4	/* channel open */
+#define NG_L2CAP_W4_L2CAP_DISCON_RSP	5	/* wait for L2CAP discon. */
+#define NG_L2CAP_W4_L2CA_DISCON_RSP	6	/* wait for upper discon. */
+
+/* Node flags */
+#define NG_L2CAP_CLT_SDP_DISABLED	(1 << 0)      /* disable SDP CLT */
+#define NG_L2CAP_CLT_RFCOMM_DISABLED	(1 << 1)      /* disable RFCOMM CLT */
+#define NG_L2CAP_CLT_TCP_DISABLED	(1 << 2)      /* disable TCP CLT */
+
+/* Debug levels */
+#define NG_L2CAP_ALERT_LEVEL		1
+#define NG_L2CAP_ERR_LEVEL		2
+#define NG_L2CAP_WARN_LEVEL		3
+#define NG_L2CAP_INFO_LEVEL		4
+
+/* Get node flags (see flags above) */
+#define	NGM_L2CAP_NODE_GET_FLAGS	0x400	/* L2CAP -> User */
+typedef u_int16_t	ng_l2cap_node_flags_ep;
+
+/* Get/Set debug level (see levels above) */
+#define	NGM_L2CAP_NODE_GET_DEBUG	0x401	/* L2CAP -> User */
+#define	NGM_L2CAP_NODE_SET_DEBUG	0x402	/* User -> L2CAP */
+typedef u_int16_t	ng_l2cap_node_debug_ep;
+
+#define NGM_L2CAP_NODE_HOOK_INFO	0x409	/* L2CAP -> Upper */
+/* bdaddr_t bdaddr; -- local (source BDADDR) */
+
+#define NGM_L2CAP_NODE_GET_CON_LIST	0x40a	/* User -> L2CAP */
+typedef struct {
+	u_int32_t	num_connections; /* number of connections */
+} ng_l2cap_node_con_list_ep;
+
+/* Connection flags */
+#define NG_L2CAP_CON_TX	(1 << 0)    /* sending data */
+#define NG_L2CAP_CON_RX	(1 << 1)    /* receiving data */
+
+typedef struct {
+	u_int8_t	state;      /* connection state */
+	u_int8_t	flags;      /* flags */
+	int16_t		pending;    /* num. pending packets */
+	u_int16_t	con_handle; /* connection handle */
+	bdaddr_t	remote;     /* remote bdaddr */
+} ng_l2cap_node_con_ep;
+
+#define NG_L2CAP_MAX_CON_NUM \
+	((0xffff - sizeof(ng_l2cap_node_con_list_ep))/sizeof(ng_l2cap_node_con_ep))
+
+#define NGM_L2CAP_NODE_GET_CHAN_LIST	0x40b	/* User -> L2CAP */
+typedef struct {
+	u_int32_t	num_channels;	/* number of channels */
+} ng_l2cap_node_chan_list_ep;
+
+typedef struct {
+	u_int32_t	state;		/* channel state */
+
+	u_int16_t	scid;		/* source (local) channel ID */
+	u_int16_t	dcid;		/* destination (remote) channel ID */
+
+	u_int16_t	imtu;		/* incomming MTU */
+	u_int16_t	omtu;		/* outgoing MTU */
+
+	u_int16_t	psm;		/* PSM */
+	bdaddr_t	remote;		/* remote bdaddr */
+} ng_l2cap_node_chan_ep;
+
+#define NG_L2CAP_MAX_CHAN_NUM \
+	((0xffff - sizeof(ng_l2cap_node_chan_list_ep))/sizeof(ng_l2cap_node_chan_ep))
+
+#endif /* ndef _NETGRAPH_L2CAP_H_ */
+
diff --git a/sys/netgraph/bluetooth/include/ng_ubt.h b/sys/netgraph/bluetooth/include/ng_ubt.h
new file mode 100644
index 0000000..1c55ad4
--- /dev/null
+++ b/sys/netgraph/bluetooth/include/ng_ubt.h
@@ -0,0 +1,103 @@
+/*
+ * ng_ubt.h
+ *
+ * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $Id: ng_ubt.h,v 1.1 2002/11/09 19:09:02 max Exp $
+ * $FreeBSD$
+ */
+
+#ifndef _NG_UBT_H_
+#define _NG_UBT_H_
+
+/* XXX FIXME Does not belong here. Move to usbdevs.h later */
+#define USB_VENDOR_MSI			0x0db0 /* MSI www.msi.com.tw */
+#define USB_VENDOR_EPOX			0x0a12 /* EPoX www.epox.com */
+
+#define USB_PRODUCT_3COM_3CREB96	0x00a0 /* 3Com Bluetooth USB dongle */
+#define USB_PRODUCT_MITSUMI_BT_DONGLE	0x641f /* Mitsumi Bluetooth USB dongle*/
+#define USB_PRODUCT_TDK_BT_DONGLE	0x0309 /* TDK Bluetooth USB dongle */
+#define USB_PRODUCT_MSI_BT_DONGLE	0x1967 /* MSI Bluetooth USB dongle */
+#define USB_PRODUCT_DBW_120M_BT_DONGLE	0x2033 /* D-Link DBW-120M */
+#define USB_PRODUCT_BT_DG02_DONGLE	0x0001 /* EPoX BT-DG02 USB dongle */
+
+/* XXX FIXME Does not belong here. Move to usb.h later */
+#define UICLASS_WIRELESS_CONTROLLER	0xe0	/* Wireless Controller */
+#define UISUBCLASS_RF_CONTROLLER	0x01	/* RF Controller */
+#define UIPROTO_BLUETOOTH		0x01	/* Bluetooth programming */
+
+/**************************************************************************
+ **************************************************************************
+ **     Netgraph node hook name, type name and type cookie and commands 
+ **************************************************************************  
+ **************************************************************************/
+
+#define NG_UBT_NODE_TYPE	"ubt"
+#define NG_UBT_HOOK		"hook"
+
+#define NGM_UBT_COOKIE		1021837971
+
+/* Debug levels */
+#define NG_UBT_ALERT_LEVEL	1
+#define NG_UBT_ERR_LEVEL	2
+#define NG_UBT_WARN_LEVEL	3
+#define NG_UBT_INFO_LEVEL	4
+
+/**************************************************************************
+ **************************************************************************
+ **                    UBT node command/event parameters
+ **************************************************************************
+ **************************************************************************/
+
+#define NGM_UBT_NODE_SET_DEBUG	1		/* set debug level */
+#define NGM_UBT_NODE_GET_DEBUG	2		/* get debug level */
+typedef u_int16_t		ng_ubt_node_debug_ep; 
+
+#define NGM_UBT_NODE_SET_QLEN	3		/* set queue length */
+#define NGM_UBT_NODE_GET_QLEN	4		/* get queue length */ 
+typedef struct {
+	int32_t		queue;			/* queue index */
+#define	NGM_UBT_NODE_QUEUE_IN	1		/* incoming queue */
+#define	NGM_UBT_NODE_QUEUE_CMD	2		/* commands */
+#define	NGM_UBT_NODE_QUEUE_ACL	3		/* ACL data */
+#define	NGM_UBT_NODE_QUEUE_SCO	4		/* SCO data */
+
+	int32_t		qlen;			/* queue length */
+} ng_ubt_node_qlen_ep;
+
+#define NGM_UBT_NODE_GET_STAT	5		/* get statistic */
+typedef struct {
+	u_int32_t	pckts_recv;		/* # of packets received */
+	u_int32_t	bytes_recv;		/* # of bytes received */
+	u_int32_t	pckts_sent;		/* # of packets sent */
+	u_int32_t	bytes_sent;		/* # of bytes sent */
+	u_int32_t	oerrors;		/* # of output errors */
+	u_int32_t	ierrors;		/* # of input errors */
+} ng_ubt_node_stat_ep;
+
+#define NGM_UBT_NODE_RESET_STAT	6		/* reset statistic */
+
+#endif /* ndef _NG_UBT_H_ */
+