Return to ip_esp.h CVS log

Up to [local] / sys / netinet

Annotation of sys/netinet/ip_esp.h, Revision 1.1.1.1

1.1       nbrk        1: /*     $OpenBSD: ip_esp.h,v 1.40 2004/02/17 12:07:45 markus Exp $      */
                      2: /*
                      3:  * The authors of this code are John Ioannidis (ji@tla.org),
                      4:  * Angelos D. Keromytis (kermit@csd.uch.gr) and
                      5:  * Niels Provos (provos@physnet.uni-hamburg.de).
                      6:  *
                      7:  * The original version of this code was written by John Ioannidis
                      8:  * for BSD/OS in Athens, Greece, in November 1995.
                      9:  *
                     10:  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
                     11:  * by Angelos D. Keromytis.
                     12:  *
                     13:  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
                     14:  * and Niels Provos.
                     15:  *
                     16:  * Additional features in 1999 by Angelos D. Keromytis.
                     17:  *
                     18:  * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis,
                     19:  * Angelos D. Keromytis and Niels Provos.
                     20:  * Copyright (c) 2001 Angelos D. Keromytis.
                     21:  *
                     22:  * Permission to use, copy, and modify this software with or without fee
                     23:  * is hereby granted, provided that this entire notice is included in
                     24:  * all copies of any software which is or includes a copy or
                     25:  * modification of this software.
                     26:  * You may use this code under the GNU public license if you so wish. Please
                     27:  * contribute changes back to the authors under this freer than GPL license
                     28:  * so that we may further the use of strong encryption without limitations to
                     29:  * all.
                     30:  *
                     31:  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
                     32:  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
                     33:  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
                     34:  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
                     35:  * PURPOSE.
                     36:  */
                     37:
                     38: #ifndef _NETINET_IP_ESP_H_
                     39: #define _NETINET_IP_ESP_H_
                     40:
                     41: #define ESP_ALEN       12      /* 96-bit authenticator */
                     42:
                     43: struct espstat
                     44: {
                     45:     u_int32_t  esps_hdrops;    /* Packet shorter than header shows */
                     46:     u_int32_t  esps_nopf;      /* Protocol family not supported */
                     47:     u_int32_t  esps_notdb;
                     48:     u_int32_t  esps_badkcr;
                     49:     u_int32_t  esps_qfull;
                     50:     u_int32_t  esps_noxform;
                     51:     u_int32_t  esps_badilen;
                     52:     u_int32_t   esps_wrap;     /* Replay counter wrapped around */
                     53:     u_int32_t   esps_badenc;   /* Bad encryption detected */
                     54:     u_int32_t  esps_badauth;   /* Only valid for transforms with auth */
                     55:     u_int32_t   esps_replay;   /* Possible packet replay detected */
                     56:     u_int32_t  esps_input;     /* Input ESP packets */
                     57:     u_int32_t  esps_output;    /* Output ESP packets */
                     58:     u_int32_t  esps_invalid;   /* Trying to use an invalid TDB */
                     59:     u_int64_t  esps_ibytes;    /* Input bytes */
                     60:     u_int64_t  esps_obytes;    /* Output bytes */
                     61:     u_int32_t  esps_toobig;    /* Packet got larger than IP_MAXPACKET */
                     62:     u_int32_t  esps_pdrops;    /* Packet blocked due to policy */
                     63:     u_int32_t  esps_crypto;    /* Crypto processing failure */
                     64:     u_int32_t  esps_udpencin;  /* Input ESP-in-UDP packets */
                     65:     u_int32_t  esps_udpencout; /* Output ESP-in-UDP packets */
                     66:     u_int32_t  esps_udpinval;  /* Invalid input ESP-in-UDP packets */
                     67: };
                     68:
                     69: /*
                     70:  * Names for ESP sysctl objects
                     71:  */
                     72: #define        ESPCTL_ENABLE           1       /* Enable ESP processing */
                     73: #define        ESPCTL_UDPENCAP_ENABLE  2       /* Enable ESP over UDP */
                     74: #define        ESPCTL_UDPENCAP_PORT    3       /* UDP port for encapsulation */
                     75: #define ESPCTL_MAXID           4
                     76:
                     77: #define ESPCTL_NAMES { \
                     78:        { 0, 0 }, \
                     79:        { "enable", CTLTYPE_INT }, \
                     80:        { "udpencap", CTLTYPE_INT }, \
                     81:        { "udpencap_port", CTLTYPE_INT }, \
                     82: }
                     83:
                     84: #define ESPCTL_VARS { \
                     85:        NULL, \
                     86:        &esp_enable, \
                     87:        &udpencap_enable, \
                     88:        &udpencap_port, \
                     89: }
                     90:
                     91: #ifdef _KERNEL
                     92: extern int esp_enable;
                     93: extern int udpencap_enable;
                     94: extern int udpencap_port;
                     95: extern struct espstat espstat;
                     96: #endif /* _KERNEL */
                     97: #endif /* _NETINET_IP_ESP_H_ */