summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_var.h
diff options
context:
space:
mode:
authorsilby <silby@FreeBSD.org>2003-02-22 06:41:47 +0000
committersilby <silby@FreeBSD.org>2003-02-22 06:41:47 +0000
commitbefb0ff113682be7457ade6d3300be70bc2516f4 (patch)
treecbeddee447e399a02ac9205d707c9b970aedfb06 /sys/netinet/ip_var.h
parent8ccfd800bd5c63b6d8c475e3e310baa626166219 (diff)
downloadFreeBSD-src-befb0ff113682be7457ade6d3300be70bc2516f4.zip
FreeBSD-src-befb0ff113682be7457ade6d3300be70bc2516f4.tar.gz
Add the ability to limit the number of IP fragments allowed per packet,
and enable it by default, with a limit of 16. At the same time, tweak maxfragpackets downward so that in the worst possible case, IP reassembly can use only 1/2 of all mbuf clusters. MFC after: 3 days Reviewed by: hsu Liked by: bmah
Diffstat (limited to 'sys/netinet/ip_var.h')
-rw-r--r--sys/netinet/ip_var.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netinet/ip_var.h b/sys/netinet/ip_var.h
index c03c446..c8df2e6 100644
--- a/sys/netinet/ip_var.h
+++ b/sys/netinet/ip_var.h
@@ -68,6 +68,7 @@ struct ipq {
u_short ipq_id; /* sequence id for reassembly */
struct mbuf *ipq_frags; /* to ip headers of fragments */
struct in_addr ipq_src,ipq_dst;
+ u_char ipq_nfrags; /* # frags in this packet */
u_int32_t ipq_div_info; /* ipfw divert port & flags */
u_int16_t ipq_div_cookie; /* ipfw divert cookie */
struct label ipq_label; /* MAC label */
OpenPOWER on IntegriCloud