Annotation of sys/net/pfkeyv2.h, Revision 1.1
1.1 ! nbrk 1: /* $OpenBSD: pfkeyv2.h,v 1.56 2006/11/24 13:52:14 reyk Exp $ */
! 2: /*
! 3: * @(#)COPYRIGHT 1.1 (NRL) January 1998
! 4: *
! 5: * NRL grants permission for redistribution and use in source and binary
! 6: * forms, with or without modification, of the software and documentation
! 7: * created at NRL provided that the following conditions are met:
! 8: *
! 9: * 1. Redistributions of source code must retain the above copyright
! 10: * notice, this list of conditions and the following disclaimer.
! 11: * 2. Redistributions in binary form must reproduce the above copyright
! 12: * notice, this list of conditions and the following disclaimer in the
! 13: * documentation and/or other materials provided with the distribution.
! 14: * 3. All advertising materials mentioning features or use of this software
! 15: * must display the following acknowledgements:
! 16: * This product includes software developed by the University of
! 17: * California, Berkeley and its contributors.
! 18: * This product includes software developed at the Information
! 19: * Technology Division, US Naval Research Laboratory.
! 20: * 4. Neither the name of the NRL nor the names of its contributors
! 21: * may be used to endorse or promote products derived from this software
! 22: * without specific prior written permission.
! 23: *
! 24: * THE SOFTWARE PROVIDED BY NRL IS PROVIDED BY NRL AND CONTRIBUTORS ``AS
! 25: * IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
! 26: * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
! 27: * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL NRL OR
! 28: * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
! 29: * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
! 30: * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
! 31: * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
! 32: * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
! 33: * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
! 34: * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
! 35: *
! 36: * The views and conclusions contained in the software and documentation
! 37: * are those of the authors and should not be interpreted as representing
! 38: * official policies, either expressed or implied, of the US Naval
! 39: * Research Laboratory (NRL).
! 40: */
! 41:
! 42: #ifndef _NET_PFKEY_V2_H_
! 43: #define _NET_PFKEY_V2_H_
! 44:
! 45: #define PF_KEY_V2 2
! 46: #define PFKEYV2_REVISION 199806L
! 47:
! 48: /* This should be updated whenever the API is altered. */
! 49: #define _OPENBSD_IPSEC_API_VERSION 2
! 50:
! 51: #define SADB_RESERVED 0
! 52: #define SADB_GETSPI 1
! 53: #define SADB_UPDATE 2
! 54: #define SADB_ADD 3
! 55: #define SADB_DELETE 4
! 56: #define SADB_GET 5
! 57: #define SADB_ACQUIRE 6
! 58: #define SADB_REGISTER 7
! 59: #define SADB_EXPIRE 8
! 60: #define SADB_FLUSH 9
! 61: #define SADB_DUMP 10
! 62: #define SADB_X_PROMISC 11
! 63: #define SADB_X_ADDFLOW 12
! 64: #define SADB_X_DELFLOW 13
! 65: #define SADB_X_GRPSPIS 14
! 66: #define SADB_X_ASKPOLICY 15
! 67: #define SADB_X_SPDDUMP 16
! 68: #define SADB_MAX 16
! 69:
! 70: struct sadb_msg {
! 71: uint8_t sadb_msg_version;
! 72: uint8_t sadb_msg_type;
! 73: uint8_t sadb_msg_errno;
! 74: uint8_t sadb_msg_satype;
! 75: uint16_t sadb_msg_len;
! 76: uint16_t sadb_msg_reserved;
! 77: uint32_t sadb_msg_seq;
! 78: uint32_t sadb_msg_pid;
! 79: };
! 80:
! 81: struct sadb_ext {
! 82: uint16_t sadb_ext_len;
! 83: uint16_t sadb_ext_type;
! 84: };
! 85:
! 86: struct sadb_sa {
! 87: uint16_t sadb_sa_len;
! 88: uint16_t sadb_sa_exttype;
! 89: uint32_t sadb_sa_spi;
! 90: uint8_t sadb_sa_replay;
! 91: uint8_t sadb_sa_state;
! 92: uint8_t sadb_sa_auth;
! 93: uint8_t sadb_sa_encrypt;
! 94: uint32_t sadb_sa_flags;
! 95: };
! 96:
! 97: struct sadb_lifetime {
! 98: uint16_t sadb_lifetime_len;
! 99: uint16_t sadb_lifetime_exttype;
! 100: uint32_t sadb_lifetime_allocations;
! 101: uint64_t sadb_lifetime_bytes;
! 102: uint64_t sadb_lifetime_addtime;
! 103: uint64_t sadb_lifetime_usetime;
! 104: };
! 105:
! 106: struct sadb_address {
! 107: uint16_t sadb_address_len;
! 108: uint16_t sadb_address_exttype;
! 109: uint32_t sadb_address_reserved;
! 110: };
! 111:
! 112: struct sadb_key {
! 113: uint16_t sadb_key_len;
! 114: uint16_t sadb_key_exttype;
! 115: uint16_t sadb_key_bits;
! 116: uint16_t sadb_key_reserved;
! 117: };
! 118:
! 119: struct sadb_ident {
! 120: uint16_t sadb_ident_len;
! 121: uint16_t sadb_ident_exttype;
! 122: uint16_t sadb_ident_type;
! 123: uint16_t sadb_ident_reserved;
! 124: uint64_t sadb_ident_id;
! 125: };
! 126:
! 127: struct sadb_sens {
! 128: uint16_t sadb_sens_len;
! 129: uint16_t sadb_sens_exttype;
! 130: uint32_t sadb_sens_dpd;
! 131: uint8_t sadb_sens_sens_level;
! 132: uint8_t sadb_sens_sens_len;
! 133: uint8_t sadb_sens_integ_level;
! 134: uint8_t sadb_sens_integ_len;
! 135: uint32_t sadb_sens_reserved;
! 136: };
! 137:
! 138: struct sadb_prop {
! 139: uint16_t sadb_prop_len;
! 140: uint16_t sadb_prop_exttype;
! 141: uint8_t sadb_prop_num;
! 142: uint8_t sadb_prop_replay;
! 143: uint16_t sadb_prop_reserved;
! 144: };
! 145:
! 146: struct sadb_comb {
! 147: uint8_t sadb_comb_auth;
! 148: uint8_t sadb_comb_encrypt;
! 149: uint16_t sadb_comb_flags;
! 150: uint16_t sadb_comb_auth_minbits;
! 151: uint16_t sadb_comb_auth_maxbits;
! 152: uint16_t sadb_comb_encrypt_minbits;
! 153: uint16_t sadb_comb_encrypt_maxbits;
! 154: uint32_t sadb_comb_reserved;
! 155: uint32_t sadb_comb_soft_allocations;
! 156: uint32_t sadb_comb_hard_allocations;
! 157: uint64_t sadb_comb_soft_bytes;
! 158: uint64_t sadb_comb_hard_bytes;
! 159: uint64_t sadb_comb_soft_addtime;
! 160: uint64_t sadb_comb_hard_addtime;
! 161: uint64_t sadb_comb_soft_usetime;
! 162: uint64_t sadb_comb_hard_usetime;
! 163: };
! 164:
! 165: struct sadb_supported {
! 166: uint16_t sadb_supported_len;
! 167: uint16_t sadb_supported_exttype;
! 168: uint32_t sadb_supported_reserved;
! 169: };
! 170:
! 171: struct sadb_alg {
! 172: uint8_t sadb_alg_id;
! 173: uint8_t sadb_alg_ivlen;
! 174: uint16_t sadb_alg_minbits;
! 175: uint16_t sadb_alg_maxbits;
! 176: uint16_t sadb_alg_reserved;
! 177: };
! 178:
! 179: struct sadb_spirange {
! 180: uint16_t sadb_spirange_len;
! 181: uint16_t sadb_spirange_exttype;
! 182: uint32_t sadb_spirange_min;
! 183: uint32_t sadb_spirange_max;
! 184: uint32_t sadb_spirange_reserved;
! 185: };
! 186:
! 187: struct sadb_protocol {
! 188: uint16_t sadb_protocol_len;
! 189: uint16_t sadb_protocol_exttype;
! 190: uint8_t sadb_protocol_proto;
! 191: uint8_t sadb_protocol_direction;
! 192: uint8_t sadb_protocol_flags;
! 193: uint8_t sadb_protocol_reserved2;
! 194: };
! 195:
! 196: struct sadb_x_policy {
! 197: uint16_t sadb_x_policy_len;
! 198: uint16_t sadb_x_policy_exttype;
! 199: u_int32_t sadb_x_policy_seq;
! 200: };
! 201:
! 202: struct sadb_x_cred {
! 203: uint16_t sadb_x_cred_len;
! 204: uint16_t sadb_x_cred_exttype;
! 205: uint16_t sadb_x_cred_type;
! 206: uint16_t sadb_x_cred_reserved;
! 207: };
! 208:
! 209: struct sadb_x_udpencap {
! 210: uint16_t sadb_x_udpencap_len;
! 211: uint16_t sadb_x_udpencap_exttype;
! 212: uint16_t sadb_x_udpencap_port;
! 213: uint16_t sadb_x_udpencap_reserved;
! 214: };
! 215:
! 216: struct sadb_x_tag {
! 217: uint16_t sadb_x_tag_len;
! 218: uint16_t sadb_x_tag_exttype;
! 219: u_int32_t sadb_x_tag_taglen;
! 220: };
! 221:
! 222: #ifdef _KERNEL
! 223: #define SADB_X_GETSPROTO(x) \
! 224: ( (x) == SADB_SATYPE_AH ? IPPROTO_AH :\
! 225: (x) == SADB_SATYPE_ESP ? IPPROTO_ESP :\
! 226: (x) == SADB_X_SATYPE_TCPSIGNATURE ? IPPROTO_TCP :\
! 227: (x) == SADB_X_SATYPE_IPCOMP ? IPPROTO_IPCOMP: IPPROTO_IPIP )
! 228: #endif
! 229:
! 230: #define SADB_EXT_RESERVED 0
! 231: #define SADB_EXT_SA 1
! 232: #define SADB_EXT_LIFETIME_CURRENT 2
! 233: #define SADB_EXT_LIFETIME_HARD 3
! 234: #define SADB_EXT_LIFETIME_SOFT 4
! 235: #define SADB_EXT_ADDRESS_SRC 5
! 236: #define SADB_EXT_ADDRESS_DST 6
! 237: #define SADB_EXT_ADDRESS_PROXY 7
! 238: #define SADB_EXT_KEY_AUTH 8
! 239: #define SADB_EXT_KEY_ENCRYPT 9
! 240: #define SADB_EXT_IDENTITY_SRC 10
! 241: #define SADB_EXT_IDENTITY_DST 11
! 242: #define SADB_EXT_SENSITIVITY 12
! 243: #define SADB_EXT_PROPOSAL 13
! 244: #define SADB_EXT_SUPPORTED_AUTH 14
! 245: #define SADB_EXT_SUPPORTED_ENCRYPT 15
! 246: #define SADB_EXT_SPIRANGE 16
! 247: #define SADB_X_EXT_SRC_MASK 17
! 248: #define SADB_X_EXT_DST_MASK 18
! 249: #define SADB_X_EXT_PROTOCOL 19
! 250: #define SADB_X_EXT_FLOW_TYPE 20
! 251: #define SADB_X_EXT_SRC_FLOW 21
! 252: #define SADB_X_EXT_DST_FLOW 22
! 253: #define SADB_X_EXT_SA2 23
! 254: #define SADB_X_EXT_DST2 24
! 255: #define SADB_X_EXT_POLICY 25
! 256: #define SADB_X_EXT_LOCAL_CREDENTIALS 26
! 257: #define SADB_X_EXT_REMOTE_CREDENTIALS 27
! 258: #define SADB_X_EXT_LOCAL_AUTH 28
! 259: #define SADB_X_EXT_REMOTE_AUTH 29
! 260: #define SADB_X_EXT_SUPPORTED_COMP 30
! 261: #define SADB_X_EXT_UDPENCAP 31
! 262: #define SADB_X_EXT_LIFETIME_LASTUSE 32
! 263: #define SADB_X_EXT_TAG 33
! 264: #define SADB_EXT_MAX 33
! 265:
! 266: /* Fix pfkeyv2.c struct pfkeyv2_socket if SATYPE_MAX > 31 */
! 267: #define SADB_SATYPE_UNSPEC 0
! 268: #define SADB_SATYPE_AH 1
! 269: #define SADB_SATYPE_ESP 2
! 270: #define SADB_SATYPE_RSVP 3
! 271: #define SADB_SATYPE_OSPFV2 4
! 272: #define SADB_SATYPE_RIPV2 5
! 273: #define SADB_SATYPE_MIP 6
! 274: #define SADB_X_SATYPE_IPIP 7
! 275: #define SADB_X_SATYPE_TCPSIGNATURE 8
! 276: #define SADB_X_SATYPE_IPCOMP 9
! 277: #define SADB_SATYPE_MAX 9
! 278:
! 279: #define SADB_SASTATE_LARVAL 0
! 280: #define SADB_SASTATE_MATURE 1
! 281: #define SADB_SASTATE_DYING 2
! 282: #define SADB_SASTATE_DEAD 3
! 283: #define SADB_SASTATE_MAX 3
! 284:
! 285: #define SADB_AALG_NONE 0
! 286: #define SADB_AALG_MD5HMAC 2
! 287: #define SADB_AALG_SHA1HMAC 3
! 288: #define SADB_X_AALG_DES 4
! 289: #define SADB_X_AALG_SHA2_256 5
! 290: #define SADB_X_AALG_SHA2_384 6
! 291: #define SADB_X_AALG_SHA2_512 7
! 292: #define SADB_X_AALG_RIPEMD160HMAC 8
! 293: #define SADB_X_AALG_MD5 249
! 294: #define SADB_X_AALG_SHA1 250
! 295: #define SADB_AALG_MAX 250
! 296:
! 297: #define SADB_EALG_NONE 0
! 298: #define SADB_X_EALG_DES_IV64 1
! 299: #define SADB_EALG_DESCBC 2
! 300: #define SADB_EALG_3DESCBC 3
! 301: #define SADB_X_EALG_RC5 4
! 302: #define SADB_X_EALG_IDEA 5
! 303: #define SADB_X_EALG_CAST 6
! 304: #define SADB_X_EALG_BLF 7
! 305: #define SADB_X_EALG_3IDEA 8
! 306: #define SADB_X_EALG_DES_IV32 9
! 307: #define SADB_X_EALG_RC4 10
! 308: #define SADB_EALG_NULL 11
! 309: #define SADB_X_EALG_AES 12
! 310: #define SADB_X_EALG_AESCTR 13
! 311: #define SADB_X_EALG_SKIPJACK 249
! 312: #define SADB_EALG_MAX 249
! 313:
! 314: #define SADB_X_CALG_NONE 0
! 315: #define SADB_X_CALG_OUI 1
! 316: #define SADB_X_CALG_DEFLATE 2
! 317: #define SADB_X_CALG_LZS 3
! 318: #define SADB_X_CALG_MAX 3
! 319:
! 320: #define SADB_SAFLAGS_PFS 0x001 /* perfect forward secrecy */
! 321: #define SADB_X_SAFLAGS_HALFIV 0x002 /* Used for ESP-old */
! 322: #define SADB_X_SAFLAGS_TUNNEL 0x004 /* Force tunneling */
! 323: #define SADB_X_SAFLAGS_CHAINDEL 0x008 /* Delete whole SA chain */
! 324: #define SADB_X_SAFLAGS_RANDOMPADDING 0x080 /* Random ESP padding */
! 325: #define SADB_X_SAFLAGS_NOREPLAY 0x100 /* No replay counter */
! 326: #define SADB_X_SAFLAGS_UDPENCAP 0x200 /* ESP in UDP */
! 327:
! 328: #define SADB_X_POLICYFLAGS_POLICY 0x0001 /* This is a static policy */
! 329:
! 330: #define SADB_IDENTTYPE_RESERVED 0
! 331: #define SADB_IDENTTYPE_PREFIX 1
! 332: #define SADB_IDENTTYPE_FQDN 2
! 333: #define SADB_IDENTTYPE_USERFQDN 3
! 334: #define SADB_X_IDENTTYPE_CONNECTION 4
! 335: #define SADB_IDENTTYPE_MAX 4
! 336:
! 337: #define SADB_KEY_FLAGS_MAX 0
! 338:
! 339: #ifdef _KERNEL
! 340: #define PFKEYV2_LIFETIME_HARD 0
! 341: #define PFKEYV2_LIFETIME_SOFT 1
! 342: #define PFKEYV2_LIFETIME_CURRENT 2
! 343: #define PFKEYV2_LIFETIME_LASTUSE 3
! 344:
! 345: #define PFKEYV2_IDENTITY_SRC 0
! 346: #define PFKEYV2_IDENTITY_DST 1
! 347:
! 348: #define PFKEYV2_ENCRYPTION_KEY 0
! 349: #define PFKEYV2_AUTHENTICATION_KEY 1
! 350:
! 351: #define PFKEYV2_SOCKETFLAGS_REGISTERED 1
! 352: #define PFKEYV2_SOCKETFLAGS_PROMISC 2
! 353:
! 354: #define PFKEYV2_SENDMESSAGE_UNICAST 1
! 355: #define PFKEYV2_SENDMESSAGE_REGISTERED 2
! 356: #define PFKEYV2_SENDMESSAGE_BROADCAST 3
! 357: #endif /* _KERNEL */
! 358:
! 359: #define SADB_X_CREDTYPE_NONE 0
! 360: #define SADB_X_CREDTYPE_X509 1 /* ASN1 encoding of the certificate */
! 361: #define SADB_X_CREDTYPE_KEYNOTE 2 /* NUL-terminated buffer */
! 362: #define SADB_X_CREDTYPE_MAX 3
! 363:
! 364: #ifdef _KERNEL
! 365: #define PFKEYV2_AUTH_LOCAL 0
! 366: #define PFKEYV2_AUTH_REMOTE 1
! 367:
! 368: #define PFKEYV2_CRED_LOCAL 0
! 369: #define PFKEYV2_CRED_REMOTE 1
! 370: #endif /* _KERNEL */
! 371:
! 372: #define SADB_X_AUTHTYPE_NONE 0
! 373: #define SADB_X_AUTHTYPE_PASSPHRASE 1
! 374: #define SADB_X_AUTHTYPE_RSA 2
! 375: #define SADB_X_AUTHTYPE_MAX 2
! 376:
! 377: #define SADB_X_FLOW_TYPE_USE 1
! 378: #define SADB_X_FLOW_TYPE_ACQUIRE 2
! 379: #define SADB_X_FLOW_TYPE_REQUIRE 3
! 380: #define SADB_X_FLOW_TYPE_BYPASS 4
! 381: #define SADB_X_FLOW_TYPE_DENY 5
! 382: #define SADB_X_FLOW_TYPE_DONTACQ 6
! 383:
! 384: #ifdef _KERNEL
! 385: struct tdb;
! 386: struct socket;
! 387: struct mbuf;
! 388:
! 389: #define EXTLEN(x) (((struct sadb_ext *)(x))->sadb_ext_len * sizeof(uint64_t))
! 390: #define PADUP(x) (((x) + sizeof(uint64_t) - 1) & ~(sizeof(uint64_t) - 1))
! 391:
! 392: struct pfkey_version
! 393: {
! 394: int protocol;
! 395: int (*create)(struct socket *socket);
! 396: int (*release)(struct socket *socket);
! 397: int (*send)(struct socket *socket, void *message, int len);
! 398: int (*sysctl)(int *, u_int, void *, size_t *, void *, size_t);
! 399: };
! 400:
! 401: struct pfkeyv2_socket
! 402: {
! 403: struct pfkeyv2_socket *next;
! 404: struct socket *socket;
! 405: int flags;
! 406: uint32_t pid;
! 407: uint32_t registration; /* Increase size if SATYPE_MAX > 31 */
! 408: };
! 409:
! 410: struct dump_state
! 411: {
! 412: struct sadb_msg *sadb_msg;
! 413: struct socket *socket;
! 414: };
! 415:
! 416: int pfkeyv2_init(void);
! 417: int pfkeyv2_cleanup(void);
! 418: int pfkeyv2_parsemessage(void *, int, void **);
! 419: int pfkeyv2_expire(struct tdb *, u_int16_t);
! 420: int pfkeyv2_acquire(struct ipsec_policy *, union sockaddr_union *,
! 421: union sockaddr_union *, u_int32_t *, struct sockaddr_encap *);
! 422:
! 423: int pfkey_register(struct pfkey_version *version);
! 424: int pfkey_unregister(struct pfkey_version *version);
! 425: int pfkey_sendup(struct socket *socket, struct mbuf *packet, int more);
! 426:
! 427: int pfkeyv2_create(struct socket *);
! 428: int pfkeyv2_get(struct tdb *, void **, void **, int *);
! 429: int pfkeyv2_policy(struct ipsec_acquire *, void **, void **);
! 430: int pfkeyv2_release(struct socket *);
! 431: int pfkeyv2_send(struct socket *, void *, int);
! 432: int pfkeyv2_sendmessage(void **, int, struct socket *, u_int8_t, int);
! 433: int pfkeyv2_dump_policy(struct ipsec_policy *, void **, void **, int *);
! 434: int pfkeyv2_dump_walker(struct tdb *, void *, int);
! 435: int pfkeyv2_flush_walker(struct tdb *, void *, int);
! 436: int pfkeyv2_get_proto_alg(u_int8_t, u_int8_t *, int *);
! 437: int pfkeyv2_sysctl(int *, u_int, void *, size_t *, void *, size_t);
! 438: int pfkeyv2_sysctl_walker(struct tdb *, void *, int);
! 439: int pfkeyv2_ipo_walk(int (*)(struct ipsec_policy *, void *), void *);
! 440: int pfkeyv2_sysctl_dump(void *);
! 441: int pfkeyv2_sysctl_policydumper(struct ipsec_policy *, void *);
! 442:
! 443: int pfdatatopacket(void *, int, struct mbuf **);
! 444:
! 445: void export_address(void **, struct sockaddr *);
! 446: void export_identity(void **, struct tdb *, int);
! 447: void export_lifetime(void **, struct tdb *, int);
! 448: void export_credentials(void **, struct tdb *, int);
! 449: void export_sa(void **, struct tdb *);
! 450: void export_flow(void **, u_int8_t, struct sockaddr_encap *,
! 451: struct sockaddr_encap *, void **);
! 452: void export_key(void **, struct tdb *, int);
! 453: void export_auth(void **, struct tdb *, int);
! 454: void export_udpencap(void **, struct tdb *);
! 455: void export_tag(void **, struct tdb *);
! 456:
! 457: void import_auth(struct tdb *, struct sadb_x_cred *, int);
! 458: void import_address(struct sockaddr *, struct sadb_address *);
! 459: void import_identity(struct tdb *, struct sadb_ident *, int);
! 460: void import_key(struct ipsecinit *, struct sadb_key *, int);
! 461: void import_lifetime(struct tdb *, struct sadb_lifetime *, int);
! 462: void import_credentials(struct tdb *, struct sadb_x_cred *, int);
! 463: void import_sa(struct tdb *, struct sadb_sa *, struct ipsecinit *);
! 464: void import_flow(struct sockaddr_encap *, struct sockaddr_encap *,
! 465: struct sadb_address *, struct sadb_address *, struct sadb_address *,
! 466: struct sadb_address *, struct sadb_protocol *, struct sadb_protocol *);
! 467: void import_udpencap(struct tdb *, struct sadb_x_udpencap *);
! 468: void import_tag(struct tdb *, struct sadb_x_tag *);
! 469: #endif /* _KERNEL */
! 470: #endif /* _NET_PFKEY_V2_H_ */
CVSweb
![[BACK]](/icons/back.gif){kind=icon}
Return to pfkeyv2.h CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / sys / net