summaryrefslogtreecommitdiffstats
path: root/usr.bin/netstat/ipsec.c
Commit message (Collapse)AuthorAgeFilesLines
* Remove the advertising clause from UCB copyrighted files in usr.bin. Thisjoel2010-12-111-4/+0
| | | | | | | | | is in accordance with the information provided at ftp://ftp.cs.berkeley.edu/pub/4bsd/README.Impt.License.Change Also add $FreeBSD$ to a few files to keep svn happy. Discussed with: imp, rwatson
* Revert most part of 200420 as requested, as more review and polish isdelphij2009-12-131-0/+2
| | | | needed.
* Remove unneeded header includes from usr.bin/ except contributed code.delphij2009-12-111-2/+0
| | | | Tested with: make universe
* Add more statistics variables for IPcomp.bz2009-11-291-0/+10
| | | | | | | Try to version the struct in a backward compatible way. People asked for the versioning of the stats structs in general before. MFC after: 5 days
* style(9)obrien2008-01-021-15/+12
| | | | | | | + kread is not a boolean, so check it as such + fix $FreeBSD$ Ids + denote copyrights with /*- + misc whitespace changes.
* Restore netstat -M functionality for most statistics on core dumps. Injhb2007-07-161-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | general, when support was added to netstat for fetching data using sysctl, no provision was left for fetching equivalent data from a core dump, and in fact, netstat would _always_ fetch data from the live kernel using sysctl even when -M was specified resulting in the user believing they were getting data from coredumps when they actually weren't. Some specific changes: - Add a global 'live' variable that is true if netstat is running against the live kernel and false if -M has been specified. - Stop abusing the sysctl flag in the protocol tables to hold the protocol number. Instead, the protocol is now its own field in the tables, and it is passed as a separate parameter to the PCB and stat routines rather than overloading the KVM offset parameter. - Don't run PCB or stats functions who don't have a namelist offset if we are being run against a crash dump (!live). - For the inet and unix PCB routines, we generate the same buffer from KVM that the sysctl usually generates complete with the header and trailer. - Don't run bpf stats for !live (before it would just silently always run live). - kread() no longer trashes memory when opening the buffer if there is an error on open and the passed in buffer is smaller than _POSIX2_LINE_MAX. - The multicast routing code doesn't fallback to kvm on live kernels if the sysctl fails. Keeping this made the code rather hairy, and netstat is already tied to the kernel ABI anyway (even when using sysctl's since things like xinpcb contain an inpcb) so any kernels this is run against that have the multicast routing stuff should have the sysctls. - Don't try to dig around in the kernel linker in the netgraph PCB routine for core dumps. Other notes: - sctp's PCB routine only works on live kernels, it looked rather complicated to generate all the same stuff via KVM. Someone can always add it later if desired though. - Fix the ipsec removal bug where N_xxx for IPSEC stats weren't renumbered. - Use sysctlbyname() everywhere rather than hardcoded mib values. MFC after: 1 week Approved by: re (rwatson)
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-011-47/+17
| | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* Don't shadow globals.yar2006-11-271-4/+4
| | | | | Found by: WARNS=6 MFC after: 3 days
* Achieve WARNS=2 by using uintmax_t to pass around 64-bit quantities,yar2006-07-281-26/+27
| | | | | | | including to printf(). Using uintmax_t is also robust to further extensions in both the C language and the bitwidth of kernel counters. Tested on: i386 amd64 ia64
* Add support for printing IPSEC protocol stats if the kernel was compiledkbyanc2005-12-281-96/+268
| | | | | | | | | | | | | with FAST_IPSEC rather than the KAME IPSEC stack. Note that the output of "netstat -s -p ipsec" differs depending on which stack is compiled into the kernel since they each keep different stats. This delta also adds the "esp", "ah", and "ipcomp" protocol stats, which are also available when the kernel is compiled with the FAST_IPSEC stack (e.g. "netstat -s -p esp"). Submitted by: Matt Titus <titus at nttmcl dot com> MFC after: 3 days
* Add __FBSDID. Replace local variable sin by sockin to not conflict with sin(3).charnier2004-07-261-7/+6
| | | | | Use warnx() instead of warn() when error message is not of any interest. Add prototypes.
* - support hmac-ripemd160.ume2004-02-051-1/+10
| | | | | | - support AES XCBC MAC/AES counter mode. Obtained from: KAME
* print stats on SPD cache lookups.ume2004-02-051-0/+5
| | | | Obtained from: KAME
* - %d is 12 chars, not 10. use NI_MAX* where appropriate.ume2004-02-051-67/+52
| | | | | | | | - goodbye RC5. - use %llu directly. - KNF. Obtained from: KAME
* Warns cleanups for netstat:dwmalone2002-09-051-2/+2
| | | | | | | | | | | 1) Include arpa/inet.h for ntohs. 2) Constness fixes. 3) Fix shadowing except for "sin" which shouldn't be in scope. 4) Remove register keyword. 5) Add missing initialsers to user defined structs. 5) Make prototype of netname6 globally visable. 6) Use right macros for printing syncache stats (even though entrie isn't a word).
* Removed duplicate VCS ID tags, as per style(9).ru2001-08-131-1/+0
|
* remove warningsassar2001-06-151-7/+6
| | | | | remove superfluous declarations make things more consistent
* remove K&R supportassar2001-06-151-19/+13
|
* revert removal of warning and K&R supportassar2001-06-151-12/+19
| | | | Requested by: bde
* remove most of the warningsassar2001-06-151-19/+12
|
* Sync with recent KAME.ume2001-06-111-41/+57
| | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
* sync with latest kame netstat. basically, more statisticsitojun2000-07-041-0/+316
OpenPOWER on IntegriCloud