diff options
author | silby <silby@FreeBSD.org> | 2003-02-22 06:41:47 +0000 |
---|---|---|
committer | silby <silby@FreeBSD.org> | 2003-02-22 06:41:47 +0000 |
commit | befb0ff113682be7457ade6d3300be70bc2516f4 (patch) | |
tree | cbeddee447e399a02ac9205d707c9b970aedfb06 /sys/netinet/ip_var.h | |
parent | 8ccfd800bd5c63b6d8c475e3e310baa626166219 (diff) | |
download | FreeBSD-src-befb0ff113682be7457ade6d3300be70bc2516f4.zip FreeBSD-src-befb0ff113682be7457ade6d3300be70bc2516f4.tar.gz |
Add the ability to limit the number of IP fragments allowed per packet,
and enable it by default, with a limit of 16.
At the same time, tweak maxfragpackets downward so that in the worst
possible case, IP reassembly can use only 1/2 of all mbuf clusters.
MFC after: 3 days
Reviewed by: hsu
Liked by: bmah
Diffstat (limited to 'sys/netinet/ip_var.h')
-rw-r--r-- | sys/netinet/ip_var.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netinet/ip_var.h b/sys/netinet/ip_var.h index c03c446..c8df2e6 100644 --- a/sys/netinet/ip_var.h +++ b/sys/netinet/ip_var.h @@ -68,6 +68,7 @@ struct ipq { u_short ipq_id; /* sequence id for reassembly */ struct mbuf *ipq_frags; /* to ip headers of fragments */ struct in_addr ipq_src,ipq_dst; + u_char ipq_nfrags; /* # frags in this packet */ u_int32_t ipq_div_info; /* ipfw divert port & flags */ u_int16_t ipq_div_cookie; /* ipfw divert cookie */ struct label ipq_label; /* MAC label */ |