From 320c8e5164d793a94bf5d538add0abe0d4f665ca Mon Sep 17 00:00:00 2001 From: thompsa Date: Mon, 26 Jun 2006 22:30:08 +0000 Subject: Add a pseudo interface for packet filtering IPSec connections before or after encryption. There are two functions, a bpf tap which has a basic header with the SPI number which our current tcpdump knows how to display, and handoff to pfil(9) for packet filtering. Obtained from: OpenBSD Based on: kern/94829 No objections: arch, net MFC after: 1 month --- sys/net/if_types.h | 1 + 1 file changed, 1 insertion(+) (limited to 'sys/net/if_types.h') diff --git a/sys/net/if_types.h b/sys/net/if_types.h index 2d25b69..4c37c49 100644 --- a/sys/net/if_types.h +++ b/sys/net/if_types.h @@ -246,6 +246,7 @@ #define IFT_GIF 0xf0 #define IFT_PVC 0xf1 #define IFT_FAITH 0xf2 +#define IFT_ENC 0xf4 #define IFT_PFLOG 0xf6 #define IFT_PFSYNC 0xf7 #define IFT_CARP 0xf8 /* Common Address Redundancy Protocol */ -- cgit v1.1