Home | History | Annotate | Line # | Download | only in netinet
tcp_usrreq.c revision 1.113.8.2
      1  1.113.8.2      yamt /*	$NetBSD: tcp_usrreq.c,v 1.113.8.2 2006/08/11 15:46:33 yamt Exp $	*/
      2       1.40    itojun 
      3       1.40    itojun /*
      4       1.40    itojun  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
      5       1.40    itojun  * All rights reserved.
      6       1.71    itojun  *
      7       1.40    itojun  * Redistribution and use in source and binary forms, with or without
      8       1.40    itojun  * modification, are permitted provided that the following conditions
      9       1.40    itojun  * are met:
     10       1.40    itojun  * 1. Redistributions of source code must retain the above copyright
     11       1.40    itojun  *    notice, this list of conditions and the following disclaimer.
     12       1.40    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     13       1.40    itojun  *    notice, this list of conditions and the following disclaimer in the
     14       1.40    itojun  *    documentation and/or other materials provided with the distribution.
     15       1.40    itojun  * 3. Neither the name of the project nor the names of its contributors
     16       1.40    itojun  *    may be used to endorse or promote products derived from this software
     17       1.40    itojun  *    without specific prior written permission.
     18       1.71    itojun  *
     19       1.40    itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     20       1.40    itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21       1.40    itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22       1.40    itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     23       1.40    itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24       1.40    itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25       1.40    itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26       1.40    itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27       1.40    itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28       1.40    itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29       1.40    itojun  * SUCH DAMAGE.
     30       1.40    itojun  */
     31       1.34   thorpej 
     32       1.34   thorpej /*-
     33       1.95   mycroft  * Copyright (c) 1997, 1998, 2005 The NetBSD Foundation, Inc.
     34       1.34   thorpej  * All rights reserved.
     35       1.34   thorpej  *
     36       1.34   thorpej  * This code is derived from software contributed to The NetBSD Foundation
     37       1.34   thorpej  * by Jason R. Thorpe and Kevin M. Lahey of the Numerical Aerospace Simulation
     38       1.34   thorpej  * Facility, NASA Ames Research Center.
     39       1.95   mycroft  * This code is derived from software contributed to The NetBSD Foundation
     40       1.95   mycroft  * by Charles M. Hannum.
     41       1.34   thorpej  *
     42       1.34   thorpej  * Redistribution and use in source and binary forms, with or without
     43       1.34   thorpej  * modification, are permitted provided that the following conditions
     44       1.34   thorpej  * are met:
     45       1.34   thorpej  * 1. Redistributions of source code must retain the above copyright
     46       1.34   thorpej  *    notice, this list of conditions and the following disclaimer.
     47       1.34   thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     48       1.34   thorpej  *    notice, this list of conditions and the following disclaimer in the
     49       1.34   thorpej  *    documentation and/or other materials provided with the distribution.
     50       1.34   thorpej  * 3. All advertising materials mentioning features or use of this software
     51       1.34   thorpej  *    must display the following acknowledgement:
     52       1.34   thorpej  *	This product includes software developed by the NetBSD
     53       1.34   thorpej  *	Foundation, Inc. and its contributors.
     54       1.34   thorpej  * 4. Neither the name of The NetBSD Foundation nor the names of its
     55       1.34   thorpej  *    contributors may be used to endorse or promote products derived
     56       1.34   thorpej  *    from this software without specific prior written permission.
     57       1.34   thorpej  *
     58       1.34   thorpej  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     59       1.34   thorpej  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     60       1.34   thorpej  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     61       1.34   thorpej  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     62       1.34   thorpej  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     63       1.34   thorpej  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     64       1.34   thorpej  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     65       1.34   thorpej  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     66       1.34   thorpej  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     67       1.34   thorpej  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     68       1.34   thorpej  * POSSIBILITY OF SUCH DAMAGE.
     69       1.34   thorpej  */
     70       1.10       cgd 
     71        1.1       cgd /*
     72       1.33   thorpej  * Copyright (c) 1982, 1986, 1988, 1993, 1995
     73        1.9   mycroft  *	The Regents of the University of California.  All rights reserved.
     74        1.1       cgd  *
     75        1.1       cgd  * Redistribution and use in source and binary forms, with or without
     76        1.1       cgd  * modification, are permitted provided that the following conditions
     77        1.1       cgd  * are met:
     78        1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     79        1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     80        1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     81        1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     82        1.1       cgd  *    documentation and/or other materials provided with the distribution.
     83       1.82       agc  * 3. Neither the name of the University nor the names of its contributors
     84        1.1       cgd  *    may be used to endorse or promote products derived from this software
     85        1.1       cgd  *    without specific prior written permission.
     86        1.1       cgd  *
     87        1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     88        1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     89        1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     90        1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     91        1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     92        1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     93        1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     94        1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     95        1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     96        1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     97        1.1       cgd  * SUCH DAMAGE.
     98        1.1       cgd  *
     99       1.33   thorpej  *	@(#)tcp_usrreq.c	8.5 (Berkeley) 6/21/95
    100        1.1       cgd  */
    101       1.67     lukem 
    102       1.67     lukem #include <sys/cdefs.h>
    103  1.113.8.2      yamt __KERNEL_RCSID(0, "$NetBSD: tcp_usrreq.c,v 1.113.8.2 2006/08/11 15:46:33 yamt Exp $");
    104        1.1       cgd 
    105       1.40    itojun #include "opt_inet.h"
    106       1.42   thorpej #include "opt_ipsec.h"
    107       1.63       abs #include "opt_tcp_debug.h"
    108       1.77    martin #include "opt_mbuftrace.h"
    109       1.40    itojun 
    110        1.5   mycroft #include <sys/param.h>
    111        1.5   mycroft #include <sys/systm.h>
    112       1.13     glass #include <sys/kernel.h>
    113        1.5   mycroft #include <sys/malloc.h>
    114        1.5   mycroft #include <sys/mbuf.h>
    115        1.5   mycroft #include <sys/socket.h>
    116        1.5   mycroft #include <sys/socketvar.h>
    117        1.5   mycroft #include <sys/protosw.h>
    118        1.5   mycroft #include <sys/errno.h>
    119        1.5   mycroft #include <sys/stat.h>
    120       1.20  christos #include <sys/proc.h>
    121       1.40    itojun #include <sys/domain.h>
    122       1.20  christos #include <sys/sysctl.h>
    123  1.113.8.1      yamt #include <sys/kauth.h>
    124        1.1       cgd 
    125        1.5   mycroft #include <net/if.h>
    126        1.5   mycroft #include <net/route.h>
    127        1.1       cgd 
    128        1.5   mycroft #include <netinet/in.h>
    129        1.5   mycroft #include <netinet/in_systm.h>
    130       1.14       cgd #include <netinet/in_var.h>
    131        1.5   mycroft #include <netinet/ip.h>
    132        1.5   mycroft #include <netinet/in_pcb.h>
    133        1.5   mycroft #include <netinet/ip_var.h>
    134      1.108      yamt #include <netinet/in_offload.h>
    135       1.40    itojun 
    136       1.40    itojun #ifdef INET6
    137       1.40    itojun #ifndef INET
    138       1.40    itojun #include <netinet/in.h>
    139       1.40    itojun #endif
    140       1.40    itojun #include <netinet/ip6.h>
    141       1.40    itojun #include <netinet6/in6_pcb.h>
    142       1.40    itojun #include <netinet6/ip6_var.h>
    143       1.40    itojun #endif
    144       1.40    itojun 
    145        1.5   mycroft #include <netinet/tcp.h>
    146        1.5   mycroft #include <netinet/tcp_fsm.h>
    147        1.5   mycroft #include <netinet/tcp_seq.h>
    148        1.5   mycroft #include <netinet/tcp_timer.h>
    149        1.5   mycroft #include <netinet/tcp_var.h>
    150        1.5   mycroft #include <netinet/tcpip.h>
    151        1.5   mycroft #include <netinet/tcp_debug.h>
    152       1.26   thorpej 
    153       1.68     lukem #include "opt_tcp_space.h"
    154        1.1       cgd 
    155       1.40    itojun #ifdef IPSEC
    156       1.40    itojun #include <netinet6/ipsec.h>
    157       1.40    itojun #endif /*IPSEC*/
    158       1.40    itojun 
    159        1.1       cgd /*
    160        1.1       cgd  * TCP protocol interface to socket abstraction.
    161        1.1       cgd  */
    162        1.1       cgd 
    163        1.1       cgd /*
    164        1.1       cgd  * Process a TCP user request for TCP tb.  If this is a send request
    165        1.1       cgd  * then m is the mbuf chain of send data.  If this is a timer expiration
    166        1.1       cgd  * (called from the software clock routine), then timertype tells which timer.
    167        1.1       cgd  */
    168        1.1       cgd /*ARGSUSED*/
    169        1.6   mycroft int
    170       1.94     perry tcp_usrreq(struct socket *so, int req,
    171      1.113  christos     struct mbuf *m, struct mbuf *nam, struct mbuf *control, struct lwp *l)
    172       1.79   darrenr {
    173       1.49  augustss 	struct inpcb *inp;
    174       1.40    itojun #ifdef INET6
    175       1.49  augustss 	struct in6pcb *in6p;
    176       1.40    itojun #endif
    177       1.49  augustss 	struct tcpcb *tp = NULL;
    178        1.1       cgd 	int s;
    179        1.1       cgd 	int error = 0;
    180       1.74    simonb #ifdef TCP_DEBUG
    181       1.74    simonb 	int ostate = 0;
    182       1.74    simonb #endif
    183       1.40    itojun 	int family;	/* family of the socket */
    184       1.40    itojun 
    185       1.40    itojun 	family = so->so_proto->pr_domain->dom_family;
    186        1.1       cgd 
    187       1.40    itojun 	if (req == PRU_CONTROL) {
    188       1.40    itojun 		switch (family) {
    189       1.56    itojun #ifdef INET
    190       1.40    itojun 		case PF_INET:
    191       1.40    itojun 			return (in_control(so, (long)m, (caddr_t)nam,
    192  1.113.8.2      yamt 			    (struct ifnet *)control, l));
    193       1.56    itojun #endif
    194       1.40    itojun #ifdef INET6
    195       1.40    itojun 		case PF_INET6:
    196       1.40    itojun 			return (in6_control(so, (long)m, (caddr_t)nam,
    197  1.113.8.2      yamt 			    (struct ifnet *)control, l));
    198       1.40    itojun #endif
    199       1.40    itojun 		default:
    200       1.40    itojun 			return EAFNOSUPPORT;
    201       1.40    itojun 		}
    202       1.45   thorpej 	}
    203       1.45   thorpej 
    204       1.46   thorpej 	if (req == PRU_PURGEIF) {
    205       1.54     enami 		switch (family) {
    206       1.56    itojun #ifdef INET
    207       1.54     enami 		case PF_INET:
    208       1.62    itojun 			in_pcbpurgeif0(&tcbtable, (struct ifnet *)control);
    209       1.54     enami 			in_purgeif((struct ifnet *)control);
    210       1.54     enami 			in_pcbpurgeif(&tcbtable, (struct ifnet *)control);
    211       1.55     enami 			break;
    212       1.56    itojun #endif
    213       1.46   thorpej #ifdef INET6
    214       1.54     enami 		case PF_INET6:
    215       1.83    itojun 			in6_pcbpurgeif0(&tcbtable, (struct ifnet *)control);
    216       1.54     enami 			in6_purgeif((struct ifnet *)control);
    217       1.83    itojun 			in6_pcbpurgeif(&tcbtable, (struct ifnet *)control);
    218       1.55     enami 			break;
    219       1.46   thorpej #endif
    220       1.54     enami 		default:
    221       1.54     enami 			return (EAFNOSUPPORT);
    222       1.54     enami 		}
    223       1.45   thorpej 		return (0);
    224       1.40    itojun 	}
    225       1.22   mycroft 
    226       1.22   mycroft 	s = splsoftnet();
    227       1.40    itojun 	switch (family) {
    228       1.56    itojun #ifdef INET
    229       1.40    itojun 	case PF_INET:
    230       1.40    itojun 		inp = sotoinpcb(so);
    231       1.40    itojun #ifdef INET6
    232       1.40    itojun 		in6p = NULL;
    233       1.40    itojun #endif
    234       1.40    itojun 		break;
    235       1.56    itojun #endif
    236       1.40    itojun #ifdef INET6
    237       1.40    itojun 	case PF_INET6:
    238       1.40    itojun 		inp = NULL;
    239       1.40    itojun 		in6p = sotoin6pcb(so);
    240       1.40    itojun 		break;
    241       1.40    itojun #endif
    242       1.40    itojun 	default:
    243       1.40    itojun 		splx(s);
    244       1.40    itojun 		return EAFNOSUPPORT;
    245       1.40    itojun 	}
    246       1.40    itojun 
    247       1.23   mycroft #ifdef DIAGNOSTIC
    248       1.57    itojun #ifdef INET6
    249       1.56    itojun 	if (inp && in6p)
    250       1.56    itojun 		panic("tcp_usrreq: both inp and in6p set to non-NULL");
    251       1.57    itojun #endif
    252       1.23   mycroft 	if (req != PRU_SEND && req != PRU_SENDOOB && control)
    253       1.23   mycroft 		panic("tcp_usrreq: unexpected control mbuf");
    254       1.23   mycroft #endif
    255        1.1       cgd 	/*
    256        1.1       cgd 	 * When a TCP is attached to a socket, then there will be
    257        1.1       cgd 	 * a (struct inpcb) pointed at by the socket, and this
    258        1.1       cgd 	 * structure will point at a subsidary (struct tcpcb).
    259        1.1       cgd 	 */
    260       1.40    itojun #ifndef INET6
    261       1.40    itojun 	if (inp == 0 && req != PRU_ATTACH)
    262       1.40    itojun #else
    263       1.40    itojun 	if ((inp == 0 && in6p == 0) && req != PRU_ATTACH)
    264       1.40    itojun #endif
    265       1.40    itojun 	{
    266       1.22   mycroft 		error = EINVAL;
    267       1.22   mycroft 		goto release;
    268        1.1       cgd 	}
    269       1.56    itojun #ifdef INET
    270        1.1       cgd 	if (inp) {
    271        1.1       cgd 		tp = intotcpcb(inp);
    272        1.1       cgd 		/* WHAT IF TP IS 0? */
    273        1.1       cgd #ifdef KPROF
    274        1.1       cgd 		tcp_acounts[tp->t_state][req]++;
    275        1.1       cgd #endif
    276       1.74    simonb #ifdef TCP_DEBUG
    277        1.1       cgd 		ostate = tp->t_state;
    278       1.74    simonb #endif
    279       1.40    itojun 	}
    280       1.56    itojun #endif
    281       1.40    itojun #ifdef INET6
    282       1.56    itojun 	if (in6p) {
    283       1.40    itojun 		tp = in6totcpcb(in6p);
    284       1.40    itojun 		/* WHAT IF TP IS 0? */
    285       1.40    itojun #ifdef KPROF
    286       1.40    itojun 		tcp_acounts[tp->t_state][req]++;
    287       1.40    itojun #endif
    288       1.74    simonb #ifdef TCP_DEBUG
    289       1.40    itojun 		ostate = tp->t_state;
    290       1.74    simonb #endif
    291       1.40    itojun 	}
    292       1.40    itojun #endif
    293       1.22   mycroft 
    294        1.1       cgd 	switch (req) {
    295        1.1       cgd 
    296        1.1       cgd 	/*
    297        1.1       cgd 	 * TCP attaches to socket via PRU_ATTACH, reserving space,
    298        1.1       cgd 	 * and an internet control block.
    299        1.1       cgd 	 */
    300        1.1       cgd 	case PRU_ATTACH:
    301       1.40    itojun #ifndef INET6
    302       1.40    itojun 		if (inp != 0)
    303       1.40    itojun #else
    304       1.40    itojun 		if (inp != 0 || in6p != 0)
    305       1.40    itojun #endif
    306       1.40    itojun 		{
    307        1.1       cgd 			error = EISCONN;
    308        1.1       cgd 			break;
    309        1.1       cgd 		}
    310        1.1       cgd 		error = tcp_attach(so);
    311        1.1       cgd 		if (error)
    312        1.1       cgd 			break;
    313        1.1       cgd 		if ((so->so_options & SO_LINGER) && so->so_linger == 0)
    314       1.32   thorpej 			so->so_linger = TCP_LINGERTIME;
    315        1.1       cgd 		tp = sototcpcb(so);
    316        1.1       cgd 		break;
    317        1.1       cgd 
    318        1.1       cgd 	/*
    319        1.1       cgd 	 * PRU_DETACH detaches the TCP protocol from the socket.
    320        1.1       cgd 	 */
    321        1.1       cgd 	case PRU_DETACH:
    322       1.24    kleink 		tp = tcp_disconnect(tp);
    323        1.1       cgd 		break;
    324        1.1       cgd 
    325        1.1       cgd 	/*
    326        1.1       cgd 	 * Give the socket an address.
    327        1.1       cgd 	 */
    328        1.1       cgd 	case PRU_BIND:
    329       1.40    itojun 		switch (family) {
    330       1.56    itojun #ifdef INET
    331       1.40    itojun 		case PF_INET:
    332  1.113.8.2      yamt 			error = in_pcbbind(inp, nam, l);
    333       1.40    itojun 			break;
    334       1.56    itojun #endif
    335       1.40    itojun #ifdef INET6
    336       1.40    itojun 		case PF_INET6:
    337  1.113.8.2      yamt 			error = in6_pcbbind(in6p, nam, l);
    338       1.58    itojun 			if (!error) {
    339       1.58    itojun 				/* mapped addr case */
    340       1.58    itojun 				if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
    341       1.58    itojun 					tp->t_family = AF_INET;
    342       1.58    itojun 				else
    343       1.58    itojun 					tp->t_family = AF_INET6;
    344       1.58    itojun 			}
    345       1.40    itojun 			break;
    346       1.40    itojun #endif
    347       1.40    itojun 		}
    348        1.1       cgd 		break;
    349        1.1       cgd 
    350        1.1       cgd 	/*
    351        1.1       cgd 	 * Prepare to accept connections.
    352        1.1       cgd 	 */
    353        1.1       cgd 	case PRU_LISTEN:
    354       1.56    itojun #ifdef INET
    355       1.40    itojun 		if (inp && inp->inp_lport == 0) {
    356       1.21   mycroft 			error = in_pcbbind(inp, (struct mbuf *)0,
    357  1.113.8.2      yamt 			    (struct lwp *)0);
    358       1.22   mycroft 			if (error)
    359       1.22   mycroft 				break;
    360       1.22   mycroft 		}
    361       1.56    itojun #endif
    362       1.40    itojun #ifdef INET6
    363       1.56    itojun 		if (in6p && in6p->in6p_lport == 0) {
    364       1.51    itojun 			error = in6_pcbbind(in6p, (struct mbuf *)0,
    365  1.113.8.2      yamt 			    (struct lwp *)0);
    366       1.40    itojun 			if (error)
    367       1.40    itojun 				break;
    368       1.40    itojun 		}
    369       1.40    itojun #endif
    370       1.22   mycroft 		tp->t_state = TCPS_LISTEN;
    371        1.1       cgd 		break;
    372        1.1       cgd 
    373        1.1       cgd 	/*
    374        1.1       cgd 	 * Initiate connection to peer.
    375        1.1       cgd 	 * Create a template for use in transmissions on this connection.
    376        1.1       cgd 	 * Enter SYN_SENT state, and mark socket as connecting.
    377        1.1       cgd 	 * Start keep-alive timer, and seed output sequence space.
    378        1.1       cgd 	 * Send initial segment on connection.
    379        1.1       cgd 	 */
    380        1.1       cgd 	case PRU_CONNECT:
    381       1.56    itojun #ifdef INET
    382       1.40    itojun 		if (inp) {
    383       1.40    itojun 			if (inp->inp_lport == 0) {
    384       1.40    itojun 				error = in_pcbbind(inp, (struct mbuf *)0,
    385  1.113.8.2      yamt 				    (struct lwp *)0);
    386       1.40    itojun 				if (error)
    387       1.40    itojun 					break;
    388       1.40    itojun 			}
    389  1.113.8.2      yamt 			error = in_pcbconnect(inp, nam, l);
    390       1.40    itojun 		}
    391       1.56    itojun #endif
    392       1.40    itojun #ifdef INET6
    393       1.56    itojun 		if (in6p) {
    394       1.40    itojun 			if (in6p->in6p_lport == 0) {
    395       1.51    itojun 				error = in6_pcbbind(in6p, (struct mbuf *)0,
    396  1.113.8.2      yamt 				    (struct lwp *)0);
    397       1.40    itojun 				if (error)
    398       1.40    itojun 					break;
    399       1.40    itojun 			}
    400  1.113.8.2      yamt 			error = in6_pcbconnect(in6p, nam, l);
    401       1.58    itojun 			if (!error) {
    402       1.58    itojun 				/* mapped addr case */
    403       1.58    itojun 				if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr))
    404       1.58    itojun 					tp->t_family = AF_INET;
    405       1.58    itojun 				else
    406       1.58    itojun 					tp->t_family = AF_INET6;
    407       1.58    itojun 			}
    408        1.1       cgd 		}
    409       1.40    itojun #endif
    410        1.1       cgd 		if (error)
    411        1.1       cgd 			break;
    412        1.1       cgd 		tp->t_template = tcp_template(tp);
    413        1.1       cgd 		if (tp->t_template == 0) {
    414       1.56    itojun #ifdef INET
    415       1.40    itojun 			if (inp)
    416       1.40    itojun 				in_pcbdisconnect(inp);
    417       1.56    itojun #endif
    418       1.40    itojun #ifdef INET6
    419       1.56    itojun 			if (in6p)
    420       1.40    itojun 				in6_pcbdisconnect(in6p);
    421       1.40    itojun #endif
    422        1.1       cgd 			error = ENOBUFS;
    423        1.1       cgd 			break;
    424        1.1       cgd 		}
    425        1.9   mycroft 		/* Compute window scaling to request.  */
    426        1.9   mycroft 		while (tp->request_r_scale < TCP_MAX_WINSHIFT &&
    427        1.9   mycroft 		    (TCP_MAXWIN << tp->request_r_scale) < so->so_rcv.sb_hiwat)
    428        1.9   mycroft 			tp->request_r_scale++;
    429        1.1       cgd 		soisconnecting(so);
    430        1.1       cgd 		tcpstat.tcps_connattempt++;
    431        1.1       cgd 		tp->t_state = TCPS_SYN_SENT;
    432       1.37   thorpej 		TCP_TIMER_ARM(tp, TCPT_KEEP, TCPTV_KEEP_INIT);
    433       1.61   thorpej 		tp->iss = tcp_new_iss(tp, 0);
    434        1.1       cgd 		tcp_sendseqinit(tp);
    435        1.1       cgd 		error = tcp_output(tp);
    436        1.1       cgd 		break;
    437        1.1       cgd 
    438        1.1       cgd 	/*
    439        1.1       cgd 	 * Create a TCP connection between two sockets.
    440        1.1       cgd 	 */
    441        1.1       cgd 	case PRU_CONNECT2:
    442        1.1       cgd 		error = EOPNOTSUPP;
    443        1.1       cgd 		break;
    444        1.1       cgd 
    445        1.1       cgd 	/*
    446        1.1       cgd 	 * Initiate disconnect from peer.
    447        1.1       cgd 	 * If connection never passed embryonic stage, just drop;
    448        1.1       cgd 	 * else if don't need to let data drain, then can just drop anyways,
    449        1.1       cgd 	 * else have to begin TCP shutdown process: mark socket disconnecting,
    450        1.1       cgd 	 * drain unread data, state switch to reflect user close, and
    451        1.1       cgd 	 * send segment (e.g. FIN) to peer.  Socket will be really disconnected
    452        1.1       cgd 	 * when peer sends FIN and acks ours.
    453        1.1       cgd 	 *
    454        1.1       cgd 	 * SHOULD IMPLEMENT LATER PRU_CONNECT VIA REALLOC TCPCB.
    455        1.1       cgd 	 */
    456        1.1       cgd 	case PRU_DISCONNECT:
    457        1.1       cgd 		tp = tcp_disconnect(tp);
    458        1.1       cgd 		break;
    459        1.1       cgd 
    460        1.1       cgd 	/*
    461        1.1       cgd 	 * Accept a connection.  Essentially all the work is
    462        1.1       cgd 	 * done at higher levels; just return the address
    463        1.1       cgd 	 * of the peer, storing through addr.
    464        1.1       cgd 	 */
    465        1.8   mycroft 	case PRU_ACCEPT:
    466       1.56    itojun #ifdef INET
    467       1.40    itojun 		if (inp)
    468       1.40    itojun 			in_setpeeraddr(inp, nam);
    469       1.56    itojun #endif
    470       1.40    itojun #ifdef INET6
    471       1.56    itojun 		if (in6p)
    472       1.40    itojun 			in6_setpeeraddr(in6p, nam);
    473       1.40    itojun #endif
    474        1.1       cgd 		break;
    475        1.1       cgd 
    476        1.1       cgd 	/*
    477        1.1       cgd 	 * Mark the connection as being incapable of further output.
    478        1.1       cgd 	 */
    479        1.1       cgd 	case PRU_SHUTDOWN:
    480        1.1       cgd 		socantsendmore(so);
    481        1.1       cgd 		tp = tcp_usrclosed(tp);
    482        1.1       cgd 		if (tp)
    483        1.1       cgd 			error = tcp_output(tp);
    484        1.1       cgd 		break;
    485        1.1       cgd 
    486        1.1       cgd 	/*
    487        1.1       cgd 	 * After a receive, possibly send window update to peer.
    488        1.1       cgd 	 */
    489        1.1       cgd 	case PRU_RCVD:
    490       1.60    itojun 		/*
    491       1.60    itojun 		 * soreceive() calls this function when a user receives
    492       1.60    itojun 		 * ancillary data on a listening socket. We don't call
    493       1.60    itojun 		 * tcp_output in such a case, since there is no header
    494       1.60    itojun 		 * template for a listening socket and hence the kernel
    495       1.60    itojun 		 * will panic.
    496       1.60    itojun 		 */
    497       1.60    itojun 		if ((so->so_state & (SS_ISCONNECTED|SS_ISCONNECTING)) != 0)
    498       1.60    itojun 			(void) tcp_output(tp);
    499        1.1       cgd 		break;
    500        1.1       cgd 
    501        1.1       cgd 	/*
    502        1.1       cgd 	 * Do a send by putting data in output queue and updating urgent
    503        1.1       cgd 	 * marker if URG set.  Possibly send more data.
    504        1.1       cgd 	 */
    505        1.1       cgd 	case PRU_SEND:
    506       1.23   mycroft 		if (control && control->m_len) {
    507       1.23   mycroft 			m_freem(control);
    508       1.23   mycroft 			m_freem(m);
    509       1.23   mycroft 			error = EINVAL;
    510       1.23   mycroft 			break;
    511       1.23   mycroft 		}
    512       1.73   thorpej 		sbappendstream(&so->so_snd, m);
    513        1.1       cgd 		error = tcp_output(tp);
    514        1.1       cgd 		break;
    515        1.1       cgd 
    516        1.1       cgd 	/*
    517        1.1       cgd 	 * Abort the TCP.
    518        1.1       cgd 	 */
    519        1.1       cgd 	case PRU_ABORT:
    520        1.1       cgd 		tp = tcp_drop(tp, ECONNABORTED);
    521        1.1       cgd 		break;
    522        1.1       cgd 
    523        1.1       cgd 	case PRU_SENSE:
    524       1.22   mycroft 		/*
    525       1.22   mycroft 		 * stat: don't bother with a blocksize.
    526       1.22   mycroft 		 */
    527       1.22   mycroft 		splx(s);
    528        1.1       cgd 		return (0);
    529        1.1       cgd 
    530        1.1       cgd 	case PRU_RCVOOB:
    531       1.23   mycroft 		if (control && control->m_len) {
    532       1.23   mycroft 			m_freem(control);
    533       1.23   mycroft 			m_freem(m);
    534       1.23   mycroft 			error = EINVAL;
    535       1.23   mycroft 			break;
    536       1.23   mycroft 		}
    537        1.1       cgd 		if ((so->so_oobmark == 0 &&
    538        1.1       cgd 		    (so->so_state & SS_RCVATMARK) == 0) ||
    539        1.1       cgd 		    so->so_options & SO_OOBINLINE ||
    540        1.1       cgd 		    tp->t_oobflags & TCPOOB_HADDATA) {
    541        1.1       cgd 			error = EINVAL;
    542        1.1       cgd 			break;
    543        1.1       cgd 		}
    544        1.1       cgd 		if ((tp->t_oobflags & TCPOOB_HAVEDATA) == 0) {
    545        1.1       cgd 			error = EWOULDBLOCK;
    546        1.1       cgd 			break;
    547        1.1       cgd 		}
    548        1.1       cgd 		m->m_len = 1;
    549        1.1       cgd 		*mtod(m, caddr_t) = tp->t_iobc;
    550       1.14       cgd 		if (((long)nam & MSG_PEEK) == 0)
    551        1.1       cgd 			tp->t_oobflags ^= (TCPOOB_HAVEDATA | TCPOOB_HADDATA);
    552        1.1       cgd 		break;
    553        1.1       cgd 
    554        1.1       cgd 	case PRU_SENDOOB:
    555        1.1       cgd 		if (sbspace(&so->so_snd) < -512) {
    556        1.1       cgd 			m_freem(m);
    557        1.1       cgd 			error = ENOBUFS;
    558        1.1       cgd 			break;
    559        1.1       cgd 		}
    560        1.1       cgd 		/*
    561        1.1       cgd 		 * According to RFC961 (Assigned Protocols),
    562        1.1       cgd 		 * the urgent pointer points to the last octet
    563        1.1       cgd 		 * of urgent data.  We continue, however,
    564        1.1       cgd 		 * to consider it to indicate the first octet
    565        1.1       cgd 		 * of data past the urgent section.
    566        1.1       cgd 		 * Otherwise, snd_up should be one lower.
    567        1.1       cgd 		 */
    568       1.73   thorpej 		sbappendstream(&so->so_snd, m);
    569        1.1       cgd 		tp->snd_up = tp->snd_una + so->so_snd.sb_cc;
    570        1.1       cgd 		tp->t_force = 1;
    571        1.1       cgd 		error = tcp_output(tp);
    572        1.1       cgd 		tp->t_force = 0;
    573        1.1       cgd 		break;
    574        1.1       cgd 
    575        1.1       cgd 	case PRU_SOCKADDR:
    576       1.56    itojun #ifdef INET
    577       1.40    itojun 		if (inp)
    578       1.40    itojun 			in_setsockaddr(inp, nam);
    579       1.56    itojun #endif
    580       1.40    itojun #ifdef INET6
    581       1.56    itojun 		if (in6p)
    582       1.40    itojun 			in6_setsockaddr(in6p, nam);
    583       1.40    itojun #endif
    584        1.1       cgd 		break;
    585        1.1       cgd 
    586        1.1       cgd 	case PRU_PEERADDR:
    587       1.56    itojun #ifdef INET
    588       1.40    itojun 		if (inp)
    589       1.40    itojun 			in_setpeeraddr(inp, nam);
    590       1.56    itojun #endif
    591       1.40    itojun #ifdef INET6
    592       1.56    itojun 		if (in6p)
    593       1.40    itojun 			in6_setpeeraddr(in6p, nam);
    594       1.40    itojun #endif
    595        1.1       cgd 		break;
    596        1.1       cgd 
    597        1.1       cgd 	default:
    598        1.1       cgd 		panic("tcp_usrreq");
    599        1.1       cgd 	}
    600       1.63       abs #ifdef TCP_DEBUG
    601        1.1       cgd 	if (tp && (so->so_options & SO_DEBUG))
    602       1.40    itojun 		tcp_trace(TA_USER, ostate, tp, NULL, req);
    603       1.63       abs #endif
    604       1.22   mycroft 
    605       1.22   mycroft release:
    606        1.1       cgd 	splx(s);
    607        1.1       cgd 	return (error);
    608        1.1       cgd }
    609        1.1       cgd 
    610        1.6   mycroft int
    611       1.94     perry tcp_ctloutput(int op, struct socket *so, int level, int optname,
    612       1.94     perry     struct mbuf **mp)
    613        1.1       cgd {
    614        1.9   mycroft 	int error = 0, s;
    615        1.9   mycroft 	struct inpcb *inp;
    616       1.40    itojun #ifdef INET6
    617       1.49  augustss 	struct in6pcb *in6p;
    618       1.40    itojun #endif
    619       1.49  augustss 	struct tcpcb *tp;
    620       1.49  augustss 	struct mbuf *m;
    621       1.49  augustss 	int i;
    622       1.40    itojun 	int family;	/* family of the socket */
    623       1.40    itojun 
    624       1.40    itojun 	family = so->so_proto->pr_domain->dom_family;
    625        1.1       cgd 
    626       1.16   mycroft 	s = splsoftnet();
    627       1.40    itojun 	switch (family) {
    628       1.56    itojun #ifdef INET
    629       1.40    itojun 	case PF_INET:
    630       1.40    itojun 		inp = sotoinpcb(so);
    631       1.40    itojun #ifdef INET6
    632       1.40    itojun 		in6p = NULL;
    633       1.40    itojun #endif
    634       1.40    itojun 		break;
    635       1.56    itojun #endif
    636       1.40    itojun #ifdef INET6
    637       1.40    itojun 	case PF_INET6:
    638       1.40    itojun 		inp = NULL;
    639       1.40    itojun 		in6p = sotoin6pcb(so);
    640       1.40    itojun 		break;
    641       1.40    itojun #endif
    642       1.40    itojun 	default:
    643       1.40    itojun 		splx(s);
    644       1.40    itojun 		return EAFNOSUPPORT;
    645       1.40    itojun 	}
    646       1.40    itojun #ifndef INET6
    647       1.40    itojun 	if (inp == NULL)
    648       1.40    itojun #else
    649       1.40    itojun 	if (inp == NULL && in6p == NULL)
    650       1.40    itojun #endif
    651       1.40    itojun 	{
    652        1.9   mycroft 		splx(s);
    653        1.9   mycroft 		if (op == PRCO_SETOPT && *mp)
    654        1.9   mycroft 			(void) m_free(*mp);
    655        1.9   mycroft 		return (ECONNRESET);
    656        1.9   mycroft 	}
    657        1.9   mycroft 	if (level != IPPROTO_TCP) {
    658       1.40    itojun 		switch (family) {
    659       1.56    itojun #ifdef INET
    660       1.40    itojun 		case PF_INET:
    661       1.40    itojun 			error = ip_ctloutput(op, so, level, optname, mp);
    662       1.40    itojun 			break;
    663       1.56    itojun #endif
    664       1.40    itojun #ifdef INET6
    665       1.40    itojun 		case PF_INET6:
    666       1.40    itojun 			error = ip6_ctloutput(op, so, level, optname, mp);
    667       1.40    itojun 			break;
    668       1.40    itojun #endif
    669       1.40    itojun 		}
    670        1.9   mycroft 		splx(s);
    671        1.9   mycroft 		return (error);
    672        1.9   mycroft 	}
    673       1.40    itojun 	if (inp)
    674       1.40    itojun 		tp = intotcpcb(inp);
    675       1.40    itojun #ifdef INET6
    676       1.40    itojun 	else if (in6p)
    677       1.40    itojun 		tp = in6totcpcb(in6p);
    678       1.40    itojun #endif
    679       1.40    itojun 	else
    680       1.40    itojun 		tp = NULL;
    681        1.1       cgd 
    682        1.1       cgd 	switch (op) {
    683        1.1       cgd 
    684        1.1       cgd 	case PRCO_SETOPT:
    685        1.1       cgd 		m = *mp;
    686        1.1       cgd 		switch (optname) {
    687        1.1       cgd 
    688       1.90  jonathan #ifdef TCP_SIGNATURE
    689       1.90  jonathan 		case TCP_MD5SIG:
    690       1.90  jonathan 			if (m == NULL || m->m_len < sizeof (int))
    691       1.90  jonathan 				error = EINVAL;
    692       1.90  jonathan 			if (error)
    693       1.90  jonathan 				break;
    694       1.91    itojun 			if (*mtod(m, int *) > 0)
    695       1.90  jonathan 				tp->t_flags |= TF_SIGNATURE;
    696       1.91    itojun 			else
    697       1.90  jonathan 				tp->t_flags &= ~TF_SIGNATURE;
    698       1.90  jonathan 			break;
    699       1.90  jonathan #endif /* TCP_SIGNATURE */
    700       1.90  jonathan 
    701        1.1       cgd 		case TCP_NODELAY:
    702        1.1       cgd 			if (m == NULL || m->m_len < sizeof (int))
    703        1.1       cgd 				error = EINVAL;
    704        1.1       cgd 			else if (*mtod(m, int *))
    705        1.1       cgd 				tp->t_flags |= TF_NODELAY;
    706        1.1       cgd 			else
    707        1.1       cgd 				tp->t_flags &= ~TF_NODELAY;
    708        1.1       cgd 			break;
    709        1.1       cgd 
    710        1.9   mycroft 		case TCP_MAXSEG:
    711       1.71    itojun 			if (m && (i = *mtod(m, int *)) > 0 &&
    712       1.28       kml 			    i <= tp->t_peermss)
    713       1.28       kml 				tp->t_peermss = i;  /* limit on send size */
    714        1.9   mycroft 			else
    715        1.9   mycroft 				error = EINVAL;
    716        1.9   mycroft 			break;
    717        1.9   mycroft 
    718        1.1       cgd 		default:
    719        1.9   mycroft 			error = ENOPROTOOPT;
    720        1.1       cgd 			break;
    721        1.1       cgd 		}
    722        1.1       cgd 		if (m)
    723        1.1       cgd 			(void) m_free(m);
    724        1.1       cgd 		break;
    725        1.1       cgd 
    726        1.1       cgd 	case PRCO_GETOPT:
    727        1.1       cgd 		*mp = m = m_get(M_WAIT, MT_SOOPTS);
    728        1.1       cgd 		m->m_len = sizeof(int);
    729       1.75      matt 		MCLAIM(m, so->so_mowner);
    730        1.1       cgd 
    731        1.1       cgd 		switch (optname) {
    732       1.90  jonathan #ifdef TCP_SIGNATURE
    733       1.90  jonathan 		case TCP_MD5SIG:
    734       1.91    itojun 			*mtod(m, int *) = (tp->t_flags & TF_SIGNATURE) ? 1 : 0;
    735       1.90  jonathan 			break;
    736       1.90  jonathan #endif
    737        1.1       cgd 		case TCP_NODELAY:
    738        1.1       cgd 			*mtod(m, int *) = tp->t_flags & TF_NODELAY;
    739        1.1       cgd 			break;
    740        1.1       cgd 		case TCP_MAXSEG:
    741       1.28       kml 			*mtod(m, int *) = tp->t_peermss;
    742        1.1       cgd 			break;
    743        1.1       cgd 		default:
    744        1.9   mycroft 			error = ENOPROTOOPT;
    745        1.1       cgd 			break;
    746        1.1       cgd 		}
    747        1.1       cgd 		break;
    748        1.1       cgd 	}
    749        1.9   mycroft 	splx(s);
    750        1.1       cgd 	return (error);
    751        1.1       cgd }
    752        1.1       cgd 
    753       1.11   mycroft #ifndef TCP_SENDSPACE
    754       1.84       tls #define	TCP_SENDSPACE	1024*32
    755       1.11   mycroft #endif
    756       1.25   thorpej int	tcp_sendspace = TCP_SENDSPACE;
    757       1.11   mycroft #ifndef TCP_RECVSPACE
    758       1.84       tls #define	TCP_RECVSPACE	1024*32
    759       1.11   mycroft #endif
    760       1.25   thorpej int	tcp_recvspace = TCP_RECVSPACE;
    761        1.1       cgd 
    762        1.1       cgd /*
    763        1.1       cgd  * Attach TCP protocol to socket, allocating
    764        1.1       cgd  * internet protocol control block, tcp control block,
    765        1.1       cgd  * bufer space, and entering LISTEN state if to accept connections.
    766        1.1       cgd  */
    767        1.6   mycroft int
    768       1.94     perry tcp_attach(struct socket *so)
    769        1.1       cgd {
    770       1.49  augustss 	struct tcpcb *tp;
    771        1.1       cgd 	struct inpcb *inp;
    772       1.40    itojun #ifdef INET6
    773       1.40    itojun 	struct in6pcb *in6p;
    774       1.40    itojun #endif
    775        1.1       cgd 	int error;
    776       1.40    itojun 	int family;	/* family of the socket */
    777       1.40    itojun 
    778       1.40    itojun 	family = so->so_proto->pr_domain->dom_family;
    779        1.1       cgd 
    780       1.75      matt #ifdef MBUFTRACE
    781       1.75      matt 	so->so_mowner = &tcp_mowner;
    782       1.75      matt 	so->so_rcv.sb_mowner = &tcp_rx_mowner;
    783       1.75      matt 	so->so_snd.sb_mowner = &tcp_tx_mowner;
    784       1.75      matt #endif
    785        1.1       cgd 	if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) {
    786        1.1       cgd 		error = soreserve(so, tcp_sendspace, tcp_recvspace);
    787        1.1       cgd 		if (error)
    788        1.1       cgd 			return (error);
    789        1.1       cgd 	}
    790       1.40    itojun 	switch (family) {
    791       1.56    itojun #ifdef INET
    792       1.40    itojun 	case PF_INET:
    793       1.40    itojun 		error = in_pcballoc(so, &tcbtable);
    794       1.40    itojun 		if (error)
    795       1.40    itojun 			return (error);
    796       1.40    itojun 		inp = sotoinpcb(so);
    797       1.40    itojun #ifdef INET6
    798       1.40    itojun 		in6p = NULL;
    799       1.40    itojun #endif
    800       1.40    itojun 		break;
    801       1.56    itojun #endif
    802       1.40    itojun #ifdef INET6
    803       1.40    itojun 	case PF_INET6:
    804       1.83    itojun 		error = in6_pcballoc(so, &tcbtable);
    805       1.40    itojun 		if (error)
    806       1.40    itojun 			return (error);
    807       1.40    itojun 		inp = NULL;
    808       1.40    itojun 		in6p = sotoin6pcb(so);
    809       1.40    itojun 		break;
    810       1.40    itojun #endif
    811       1.40    itojun 	default:
    812       1.40    itojun 		return EAFNOSUPPORT;
    813       1.40    itojun 	}
    814       1.40    itojun 	if (inp)
    815       1.40    itojun 		tp = tcp_newtcpcb(family, (void *)inp);
    816       1.40    itojun #ifdef INET6
    817       1.40    itojun 	else if (in6p)
    818       1.40    itojun 		tp = tcp_newtcpcb(family, (void *)in6p);
    819       1.40    itojun #endif
    820       1.41    itojun 	else
    821       1.41    itojun 		tp = NULL;
    822       1.40    itojun 
    823        1.1       cgd 	if (tp == 0) {
    824        1.1       cgd 		int nofd = so->so_state & SS_NOFDREF;	/* XXX */
    825        1.1       cgd 
    826        1.1       cgd 		so->so_state &= ~SS_NOFDREF;	/* don't free the socket yet */
    827       1.56    itojun #ifdef INET
    828       1.40    itojun 		if (inp)
    829       1.40    itojun 			in_pcbdetach(inp);
    830       1.56    itojun #endif
    831       1.40    itojun #ifdef INET6
    832       1.56    itojun 		if (in6p)
    833       1.40    itojun 			in6_pcbdetach(in6p);
    834       1.40    itojun #endif
    835        1.1       cgd 		so->so_state |= nofd;
    836        1.1       cgd 		return (ENOBUFS);
    837        1.1       cgd 	}
    838        1.1       cgd 	tp->t_state = TCPS_CLOSED;
    839        1.1       cgd 	return (0);
    840        1.1       cgd }
    841        1.1       cgd 
    842        1.1       cgd /*
    843        1.1       cgd  * Initiate (or continue) disconnect.
    844        1.1       cgd  * If embryonic state, just send reset (once).
    845        1.1       cgd  * If in ``let data drain'' option and linger null, just drop.
    846        1.1       cgd  * Otherwise (hard), mark socket disconnecting and drop
    847        1.1       cgd  * current input data; switch states based on user close, and
    848        1.1       cgd  * send segment to peer (with FIN).
    849        1.1       cgd  */
    850        1.1       cgd struct tcpcb *
    851       1.94     perry tcp_disconnect(struct tcpcb *tp)
    852        1.1       cgd {
    853       1.40    itojun 	struct socket *so;
    854       1.40    itojun 
    855       1.40    itojun 	if (tp->t_inpcb)
    856       1.40    itojun 		so = tp->t_inpcb->inp_socket;
    857       1.40    itojun #ifdef INET6
    858       1.40    itojun 	else if (tp->t_in6pcb)
    859       1.40    itojun 		so = tp->t_in6pcb->in6p_socket;
    860       1.40    itojun #endif
    861       1.40    itojun 	else
    862       1.40    itojun 		so = NULL;
    863        1.1       cgd 
    864       1.12   mycroft 	if (TCPS_HAVEESTABLISHED(tp->t_state) == 0)
    865        1.1       cgd 		tp = tcp_close(tp);
    866        1.1       cgd 	else if ((so->so_options & SO_LINGER) && so->so_linger == 0)
    867        1.1       cgd 		tp = tcp_drop(tp, 0);
    868        1.1       cgd 	else {
    869        1.1       cgd 		soisdisconnecting(so);
    870        1.1       cgd 		sbflush(&so->so_rcv);
    871        1.1       cgd 		tp = tcp_usrclosed(tp);
    872        1.1       cgd 		if (tp)
    873        1.1       cgd 			(void) tcp_output(tp);
    874        1.1       cgd 	}
    875        1.1       cgd 	return (tp);
    876        1.1       cgd }
    877        1.1       cgd 
    878        1.1       cgd /*
    879        1.1       cgd  * User issued close, and wish to trail through shutdown states:
    880        1.1       cgd  * if never received SYN, just forget it.  If got a SYN from peer,
    881        1.1       cgd  * but haven't sent FIN, then go to FIN_WAIT_1 state to send peer a FIN.
    882        1.1       cgd  * If already got a FIN from peer, then almost done; go to LAST_ACK
    883        1.1       cgd  * state.  In all other cases, have already sent FIN to peer (e.g.
    884        1.1       cgd  * after PRU_SHUTDOWN), and just have to play tedious game waiting
    885        1.1       cgd  * for peer to send FIN or not respond to keep-alives, etc.
    886        1.1       cgd  * We can let the user exit from the close as soon as the FIN is acked.
    887        1.1       cgd  */
    888        1.1       cgd struct tcpcb *
    889       1.94     perry tcp_usrclosed(struct tcpcb *tp)
    890        1.1       cgd {
    891        1.1       cgd 
    892        1.1       cgd 	switch (tp->t_state) {
    893        1.1       cgd 
    894        1.1       cgd 	case TCPS_CLOSED:
    895        1.1       cgd 	case TCPS_LISTEN:
    896        1.1       cgd 	case TCPS_SYN_SENT:
    897        1.1       cgd 		tp->t_state = TCPS_CLOSED;
    898        1.1       cgd 		tp = tcp_close(tp);
    899        1.1       cgd 		break;
    900        1.1       cgd 
    901        1.1       cgd 	case TCPS_SYN_RECEIVED:
    902        1.1       cgd 	case TCPS_ESTABLISHED:
    903        1.1       cgd 		tp->t_state = TCPS_FIN_WAIT_1;
    904        1.1       cgd 		break;
    905        1.1       cgd 
    906        1.1       cgd 	case TCPS_CLOSE_WAIT:
    907        1.1       cgd 		tp->t_state = TCPS_LAST_ACK;
    908        1.1       cgd 		break;
    909        1.1       cgd 	}
    910       1.18   mycroft 	if (tp && tp->t_state >= TCPS_FIN_WAIT_2) {
    911       1.40    itojun 		struct socket *so;
    912       1.40    itojun 		if (tp->t_inpcb)
    913       1.40    itojun 			so = tp->t_inpcb->inp_socket;
    914       1.40    itojun #ifdef INET6
    915       1.40    itojun 		else if (tp->t_in6pcb)
    916       1.40    itojun 			so = tp->t_in6pcb->in6p_socket;
    917       1.40    itojun #endif
    918       1.40    itojun 		else
    919       1.40    itojun 			so = NULL;
    920  1.113.8.1      yamt 		if (so)
    921  1.113.8.1      yamt 			soisdisconnected(so);
    922       1.19   mycroft 		/*
    923       1.19   mycroft 		 * If we are in FIN_WAIT_2, we arrived here because the
    924       1.19   mycroft 		 * application did a shutdown of the send side.  Like the
    925       1.19   mycroft 		 * case of a transition from FIN_WAIT_1 to FIN_WAIT_2 after
    926       1.19   mycroft 		 * a full close, we start a timer to make sure sockets are
    927       1.19   mycroft 		 * not left in FIN_WAIT_2 forever.
    928       1.19   mycroft 		 */
    929       1.38     mouse 		if ((tp->t_state == TCPS_FIN_WAIT_2) && (tcp_maxidle > 0))
    930       1.37   thorpej 			TCP_TIMER_ARM(tp, TCPT_2MSL, tcp_maxidle);
    931       1.18   mycroft 	}
    932        1.1       cgd 	return (tp);
    933       1.17   thorpej }
    934       1.17   thorpej 
    935       1.86    atatat /*
    936       1.86    atatat  * sysctl helper routine for net.inet.ip.mssdflt.  it can't be less
    937       1.86    atatat  * than 32.
    938       1.86    atatat  */
    939       1.86    atatat static int
    940       1.86    atatat sysctl_net_inet_tcp_mssdflt(SYSCTLFN_ARGS)
    941       1.86    atatat {
    942       1.86    atatat 	int error, mssdflt;
    943       1.86    atatat 	struct sysctlnode node;
    944       1.86    atatat 
    945       1.86    atatat 	mssdflt = tcp_mssdflt;
    946       1.86    atatat 	node = *rnode;
    947       1.86    atatat 	node.sysctl_data = &mssdflt;
    948       1.86    atatat 	error = sysctl_lookup(SYSCTLFN_CALL(&node));
    949       1.86    atatat 	if (error || newp == NULL)
    950       1.86    atatat 		return (error);
    951       1.86    atatat 
    952       1.86    atatat 	if (mssdflt < 32)
    953       1.86    atatat 		return (EINVAL);
    954       1.86    atatat 	tcp_mssdflt = mssdflt;
    955       1.86    atatat 
    956       1.86    atatat 	return (0);
    957       1.86    atatat }
    958       1.36      matt 
    959       1.17   thorpej /*
    960       1.86    atatat  * sysctl helper routine for setting port related values under
    961       1.86    atatat  * net.inet.ip and net.inet6.ip6.  does basic range checking and does
    962       1.86    atatat  * additional checks for each type.  this code has placed in
    963       1.86    atatat  * tcp_input.c since INET and INET6 both use the same tcp code.
    964       1.86    atatat  *
    965       1.86    atatat  * this helper is not static so that both inet and inet6 can use it.
    966       1.17   thorpej  */
    967       1.17   thorpej int
    968       1.86    atatat sysctl_net_inet_ip_ports(SYSCTLFN_ARGS)
    969       1.86    atatat {
    970       1.86    atatat 	int error, tmp;
    971       1.86    atatat 	int apmin, apmax;
    972       1.86    atatat #ifndef IPNOPRIVPORTS
    973       1.86    atatat 	int lpmin, lpmax;
    974       1.86    atatat #endif /* IPNOPRIVPORTS */
    975       1.86    atatat 	struct sysctlnode node;
    976       1.86    atatat 
    977       1.86    atatat 	if (namelen != 0)
    978       1.86    atatat 		return (EINVAL);
    979       1.86    atatat 
    980       1.86    atatat 	switch (name[-3]) {
    981       1.86    atatat #ifdef INET
    982       1.86    atatat 	    case PF_INET:
    983       1.86    atatat 		apmin = anonportmin;
    984       1.86    atatat 		apmax = anonportmax;
    985       1.86    atatat #ifndef IPNOPRIVPORTS
    986       1.86    atatat 		lpmin = lowportmin;
    987       1.86    atatat 		lpmax = lowportmax;
    988       1.86    atatat #endif /* IPNOPRIVPORTS */
    989       1.86    atatat 		break;
    990       1.86    atatat #endif /* INET */
    991       1.86    atatat #ifdef INET6
    992       1.86    atatat 	    case PF_INET6:
    993       1.86    atatat 		apmin = ip6_anonportmin;
    994       1.86    atatat 		apmax = ip6_anonportmax;
    995       1.86    atatat #ifndef IPNOPRIVPORTS
    996       1.86    atatat 		lpmin = ip6_lowportmin;
    997       1.86    atatat 		lpmax = ip6_lowportmax;
    998       1.86    atatat #endif /* IPNOPRIVPORTS */
    999       1.86    atatat 		break;
   1000       1.86    atatat #endif /* INET6 */
   1001       1.86    atatat 	    default:
   1002       1.86    atatat 		return (EINVAL);
   1003       1.86    atatat 	}
   1004       1.86    atatat 
   1005       1.86    atatat 	/*
   1006       1.86    atatat 	 * insert temporary copy into node, perform lookup on
   1007       1.86    atatat 	 * temporary, then restore pointer
   1008       1.86    atatat 	 */
   1009       1.86    atatat 	node = *rnode;
   1010       1.86    atatat 	tmp = *(int*)rnode->sysctl_data;
   1011       1.86    atatat 	node.sysctl_data = &tmp;
   1012       1.86    atatat 	error = sysctl_lookup(SYSCTLFN_CALL(&node));
   1013       1.86    atatat 	if (error || newp == NULL)
   1014       1.86    atatat 		return (error);
   1015       1.86    atatat 
   1016       1.86    atatat 	/*
   1017       1.86    atatat 	 * simple port range check
   1018       1.86    atatat 	 */
   1019       1.86    atatat 	if (tmp < 0 || tmp > 65535)
   1020       1.86    atatat 		return (EINVAL);
   1021       1.86    atatat 
   1022       1.86    atatat 	/*
   1023       1.86    atatat 	 * per-node range checks
   1024       1.86    atatat 	 */
   1025       1.86    atatat 	switch (rnode->sysctl_num) {
   1026       1.86    atatat 	case IPCTL_ANONPORTMIN:
   1027       1.86    atatat 		if (tmp >= apmax)
   1028       1.86    atatat 			return (EINVAL);
   1029       1.86    atatat #ifndef IPNOPRIVPORTS
   1030       1.86    atatat 		if (tmp < IPPORT_RESERVED)
   1031       1.86    atatat                         return (EINVAL);
   1032       1.86    atatat #endif /* IPNOPRIVPORTS */
   1033       1.86    atatat 		break;
   1034       1.86    atatat 
   1035       1.86    atatat 	case IPCTL_ANONPORTMAX:
   1036       1.86    atatat                 if (apmin >= tmp)
   1037       1.86    atatat 			return (EINVAL);
   1038       1.86    atatat #ifndef IPNOPRIVPORTS
   1039       1.86    atatat 		if (tmp < IPPORT_RESERVED)
   1040       1.86    atatat                         return (EINVAL);
   1041       1.86    atatat #endif /* IPNOPRIVPORTS */
   1042       1.86    atatat 		break;
   1043       1.86    atatat 
   1044       1.86    atatat #ifndef IPNOPRIVPORTS
   1045       1.86    atatat 	case IPCTL_LOWPORTMIN:
   1046       1.86    atatat 		if (tmp >= lpmax ||
   1047       1.86    atatat 		    tmp > IPPORT_RESERVEDMAX ||
   1048       1.86    atatat 		    tmp < IPPORT_RESERVEDMIN)
   1049       1.86    atatat 			return (EINVAL);
   1050       1.86    atatat 		break;
   1051       1.86    atatat 
   1052       1.86    atatat 	case IPCTL_LOWPORTMAX:
   1053       1.86    atatat 		if (lpmin >= tmp ||
   1054       1.86    atatat 		    tmp > IPPORT_RESERVEDMAX ||
   1055       1.86    atatat 		    tmp < IPPORT_RESERVEDMIN)
   1056       1.86    atatat 			return (EINVAL);
   1057       1.86    atatat 		break;
   1058       1.86    atatat #endif /* IPNOPRIVPORTS */
   1059       1.86    atatat 
   1060       1.86    atatat 	default:
   1061       1.86    atatat 		return (EINVAL);
   1062       1.86    atatat 	}
   1063       1.86    atatat 
   1064       1.86    atatat 	*(int*)rnode->sysctl_data = tmp;
   1065       1.86    atatat 
   1066       1.86    atatat 	return (0);
   1067       1.86    atatat }
   1068       1.86    atatat 
   1069       1.86    atatat /*
   1070       1.86    atatat  * sysctl helper routine for the net.inet.tcp.ident and
   1071       1.86    atatat  * net.inet6.tcp6.ident nodes.  contains backwards compat code for the
   1072       1.86    atatat  * old way of looking up the ident information for ipv4 which involves
   1073       1.86    atatat  * stuffing the port/addr pairs into the mib lookup.
   1074       1.86    atatat  */
   1075       1.86    atatat static int
   1076       1.86    atatat sysctl_net_inet_tcp_ident(SYSCTLFN_ARGS)
   1077       1.86    atatat {
   1078       1.86    atatat #ifdef INET
   1079       1.86    atatat 	struct inpcb *inb;
   1080       1.86    atatat 	struct sockaddr_in *si4[2];
   1081       1.86    atatat #endif /* INET */
   1082       1.86    atatat #ifdef INET6
   1083       1.86    atatat 	struct in6pcb *in6b;
   1084       1.86    atatat 	struct sockaddr_in6 *si6[2];
   1085       1.86    atatat #endif /* INET6 */
   1086       1.86    atatat 	struct sockaddr_storage sa[2];
   1087       1.86    atatat 	struct socket *sockp;
   1088       1.86    atatat 	size_t sz;
   1089       1.86    atatat 	uid_t uid;
   1090       1.86    atatat 	int error, pf;
   1091       1.86    atatat 
   1092       1.86    atatat 	if (namelen != 4 && namelen != 0)
   1093       1.86    atatat 		return (EINVAL);
   1094       1.86    atatat 	if (name[-2] != IPPROTO_TCP)
   1095       1.86    atatat 		return (EINVAL);
   1096       1.86    atatat 	pf = name[-3];
   1097       1.86    atatat 
   1098       1.86    atatat 	/* old style lookup, ipv4 only */
   1099       1.86    atatat 	if (namelen == 4) {
   1100       1.86    atatat #ifdef INET
   1101       1.88    atatat 		struct in_addr laddr, raddr;
   1102       1.88    atatat 		u_int lport, rport;
   1103       1.88    atatat 
   1104       1.86    atatat 		if (pf != PF_INET)
   1105       1.86    atatat 			return (EPROTONOSUPPORT);
   1106       1.86    atatat 		raddr.s_addr = (uint32_t)name[0];
   1107       1.86    atatat 		rport = (u_int)name[1];
   1108       1.86    atatat 		laddr.s_addr = (uint32_t)name[2];
   1109       1.86    atatat 		lport = (u_int)name[3];
   1110       1.86    atatat 		inb = in_pcblookup_connect(&tcbtable, raddr, rport,
   1111       1.86    atatat 					   laddr, lport);
   1112       1.86    atatat 		if (inb == NULL || (sockp = inb->inp_socket) == NULL)
   1113       1.86    atatat 			return (ESRCH);
   1114      1.103  christos 		uid = sockp->so_uidinfo->ui_uid;
   1115       1.86    atatat 		if (oldp) {
   1116       1.86    atatat 			sz = MIN(sizeof(uid), *oldlenp);
   1117       1.86    atatat 			error = copyout(&uid, oldp, sz);
   1118       1.69    martin 			if (error)
   1119       1.70    martin 				return (error);
   1120       1.69    martin 		}
   1121       1.86    atatat 		*oldlenp = sizeof(uid);
   1122       1.86    atatat 		return (0);
   1123       1.86    atatat #else /* INET */
   1124       1.86    atatat 		return (EINVAL);
   1125       1.86    atatat #endif /* INET */
   1126       1.86    atatat 	}
   1127       1.86    atatat 
   1128       1.86    atatat 	if (newp == NULL || newlen != sizeof(sa))
   1129       1.86    atatat 		return (EINVAL);
   1130       1.86    atatat 	error = copyin(newp, &sa, newlen);
   1131       1.86    atatat 	if (error)
   1132       1.86    atatat 		return (error);
   1133       1.86    atatat 
   1134       1.86    atatat 	/*
   1135       1.86    atatat 	 * requested families must match
   1136       1.86    atatat 	 */
   1137       1.86    atatat 	if (pf != sa[0].ss_family || sa[0].ss_family != sa[1].ss_family)
   1138       1.86    atatat 		return (EINVAL);
   1139       1.86    atatat 
   1140       1.86    atatat 	switch (pf) {
   1141       1.86    atatat #ifdef INET
   1142       1.86    atatat 	    case PF_INET:
   1143       1.86    atatat 		si4[0] = (struct sockaddr_in*)&sa[0];
   1144       1.86    atatat 		si4[1] = (struct sockaddr_in*)&sa[1];
   1145       1.86    atatat 		if (si4[0]->sin_len != sizeof(*si4[0]) ||
   1146       1.86    atatat 		    si4[0]->sin_len != si4[1]->sin_len)
   1147       1.86    atatat 			return (EINVAL);
   1148       1.86    atatat 		inb = in_pcblookup_connect(&tcbtable,
   1149       1.86    atatat 		    si4[0]->sin_addr, si4[0]->sin_port,
   1150       1.86    atatat 		    si4[1]->sin_addr, si4[1]->sin_port);
   1151       1.86    atatat 		if (inb == NULL || (sockp = inb->inp_socket) == NULL)
   1152       1.86    atatat 			return (ESRCH);
   1153       1.86    atatat 		break;
   1154       1.86    atatat #endif /* INET */
   1155       1.86    atatat #ifdef INET6
   1156       1.86    atatat 	    case PF_INET6:
   1157       1.86    atatat 		si6[0] = (struct sockaddr_in6*)&sa[0];
   1158       1.86    atatat 		si6[1] = (struct sockaddr_in6*)&sa[1];
   1159       1.86    atatat 		if (si6[0]->sin6_len != sizeof(*si6[0]) ||
   1160       1.86    atatat 		    si6[0]->sin6_len != si6[1]->sin6_len)
   1161       1.86    atatat 			return (EINVAL);
   1162       1.86    atatat 		in6b = in6_pcblookup_connect(&tcbtable,
   1163       1.86    atatat 		    &si6[0]->sin6_addr, si6[0]->sin6_port,
   1164       1.86    atatat 		    &si6[1]->sin6_addr, si6[1]->sin6_port, 0);
   1165       1.86    atatat 		if (in6b == NULL || (sockp = in6b->in6p_socket) == NULL)
   1166       1.86    atatat 			return (ESRCH);
   1167       1.86    atatat 		break;
   1168       1.86    atatat #endif /* INET6 */
   1169       1.86    atatat 	    default:
   1170       1.86    atatat 		return (EPROTONOSUPPORT);
   1171       1.86    atatat 	}
   1172      1.113  christos 	*oldlenp = sizeof(uid);
   1173       1.86    atatat 
   1174      1.103  christos 	uid = sockp->so_uidinfo->ui_uid;
   1175       1.86    atatat 	if (oldp) {
   1176       1.86    atatat 		sz = MIN(sizeof(uid), *oldlenp);
   1177       1.86    atatat 		error = copyout(&uid, oldp, sz);
   1178       1.86    atatat 		if (error)
   1179       1.86    atatat 			return (error);
   1180       1.39        tv 	}
   1181       1.86    atatat 	*oldlenp = sizeof(uid);
   1182       1.38     mouse 
   1183       1.86    atatat 	return (0);
   1184       1.76  christos }
   1185       1.76  christos 
   1186       1.86    atatat /*
   1187       1.97    atatat  * sysctl helper for the inet and inet6 pcblists.  handles tcp/udp and
   1188       1.97    atatat  * inet/inet6, as well as raw pcbs for each.  specifically not
   1189       1.97    atatat  * declared static so that raw sockets and udp/udp6 can use it as
   1190       1.97    atatat  * well.
   1191       1.97    atatat  */
   1192       1.97    atatat int
   1193       1.97    atatat sysctl_inpcblist(SYSCTLFN_ARGS)
   1194       1.97    atatat {
   1195       1.97    atatat #ifdef INET
   1196       1.97    atatat 	struct sockaddr_in *in;
   1197      1.104  christos 	const struct inpcb *inp;
   1198       1.97    atatat #endif
   1199       1.97    atatat #ifdef INET6
   1200       1.97    atatat 	struct sockaddr_in6 *in6;
   1201      1.104  christos 	const struct in6pcb *in6p;
   1202       1.97    atatat #endif
   1203      1.106    atatat 	/*
   1204      1.106    atatat 	 * sysctl_data is const, but CIRCLEQ_FOREACH can't use a const
   1205      1.106    atatat 	 * struct inpcbtable pointer, so we have to discard const.  :-/
   1206      1.106    atatat 	 */
   1207      1.104  christos 	struct inpcbtable *pcbtbl = __UNCONST(rnode->sysctl_data);
   1208      1.104  christos 	const struct inpcb_hdr *inph;
   1209       1.97    atatat 	struct tcpcb *tp;
   1210       1.97    atatat 	struct kinfo_pcb pcb;
   1211       1.97    atatat 	char *dp;
   1212       1.97    atatat 	u_int op, arg;
   1213       1.97    atatat 	size_t len, needed, elem_size, out_size;
   1214       1.97    atatat 	int error, elem_count, pf, proto, pf2;
   1215       1.97    atatat 
   1216       1.97    atatat 	if (namelen != 4)
   1217       1.97    atatat 		return (EINVAL);
   1218       1.97    atatat 
   1219  1.113.8.1      yamt 	if (oldp != NULL) {
   1220  1.113.8.1      yamt 		    len = *oldlenp;
   1221  1.113.8.1      yamt 		    elem_size = name[2];
   1222  1.113.8.1      yamt 		    elem_count = name[3];
   1223  1.113.8.1      yamt 		    if (elem_size != sizeof(pcb))
   1224  1.113.8.1      yamt 			    return EINVAL;
   1225  1.113.8.1      yamt 	} else {
   1226  1.113.8.1      yamt 		    len = 0;
   1227  1.113.8.1      yamt 		    elem_count = INT_MAX;
   1228  1.113.8.1      yamt 		    elem_size = sizeof(pcb);
   1229  1.113.8.1      yamt 	}
   1230       1.97    atatat 	error = 0;
   1231       1.97    atatat 	dp = oldp;
   1232       1.97    atatat 	op = name[0];
   1233       1.97    atatat 	arg = name[1];
   1234  1.113.8.1      yamt 	out_size = elem_size;
   1235       1.97    atatat 	needed = 0;
   1236       1.97    atatat 
   1237       1.97    atatat 	if (namelen == 1 && name[0] == CTL_QUERY)
   1238      1.105    atatat 		return (sysctl_query(SYSCTLFN_CALL(rnode)));
   1239       1.97    atatat 
   1240       1.97    atatat 	if (name - oname != 4)
   1241       1.97    atatat 		return (EINVAL);
   1242       1.97    atatat 
   1243       1.97    atatat 	pf = oname[1];
   1244       1.97    atatat 	proto = oname[2];
   1245  1.113.8.1      yamt 	pf2 = (oldp != NULL) ? pf : 0;
   1246       1.97    atatat 
   1247       1.97    atatat 	CIRCLEQ_FOREACH(inph, &pcbtbl->inpt_queue, inph_queue) {
   1248       1.99    atatat #ifdef INET
   1249      1.104  christos 		inp = (const struct inpcb *)inph;
   1250       1.99    atatat #endif
   1251       1.99    atatat #ifdef INET6
   1252      1.104  christos 		in6p = (const struct in6pcb *)inph;
   1253       1.99    atatat #endif
   1254       1.97    atatat 
   1255       1.99    atatat 		if (inph->inph_af != pf)
   1256       1.97    atatat 			continue;
   1257       1.97    atatat 
   1258  1.113.8.2      yamt 		/* XXX elad - should be done better */
   1259  1.113.8.2      yamt 		if (security_curtain &&
   1260  1.113.8.2      yamt 		    (kauth_cred_geteuid(l->l_cred) != 0) &&
   1261  1.113.8.2      yamt 		    (kauth_cred_geteuid(l->l_cred) !=
   1262  1.113.8.2      yamt 		     inph->inph_socket->so_uidinfo->ui_uid))
   1263      1.111      elad 			continue;
   1264      1.111      elad 
   1265       1.97    atatat 		memset(&pcb, 0, sizeof(pcb));
   1266       1.97    atatat 
   1267       1.97    atatat 		pcb.ki_family = pf;
   1268       1.97    atatat 		pcb.ki_type = proto;
   1269       1.97    atatat 
   1270       1.97    atatat 		switch (pf2) {
   1271       1.97    atatat 		case 0:
   1272       1.97    atatat 			/* just probing for size */
   1273       1.97    atatat 			break;
   1274       1.97    atatat #ifdef INET
   1275       1.97    atatat 		case PF_INET:
   1276       1.97    atatat 			pcb.ki_family = inp->inp_socket->so_proto->
   1277       1.97    atatat 			    pr_domain->dom_family;
   1278       1.97    atatat 			pcb.ki_type = inp->inp_socket->so_proto->
   1279       1.97    atatat 			    pr_type;
   1280       1.97    atatat 			pcb.ki_protocol = inp->inp_socket->so_proto->
   1281       1.97    atatat 			    pr_protocol;
   1282       1.97    atatat 			pcb.ki_pflags = inp->inp_flags;
   1283       1.97    atatat 
   1284       1.97    atatat 			pcb.ki_sostate = inp->inp_socket->so_state;
   1285       1.97    atatat 			pcb.ki_prstate = inp->inp_state;
   1286       1.97    atatat 			if (proto == IPPROTO_TCP) {
   1287       1.97    atatat 				tp = intotcpcb(inp);
   1288       1.97    atatat 				pcb.ki_tstate = tp->t_state;
   1289       1.97    atatat 				pcb.ki_tflags = tp->t_flags;
   1290       1.97    atatat 			}
   1291       1.97    atatat 
   1292       1.97    atatat 			pcb.ki_pcbaddr = PTRTOUINT64(inp);
   1293       1.97    atatat 			pcb.ki_ppcbaddr = PTRTOUINT64(inp->inp_ppcb);
   1294       1.97    atatat 			pcb.ki_sockaddr = PTRTOUINT64(inp->inp_socket);
   1295       1.97    atatat 
   1296       1.97    atatat 			pcb.ki_rcvq = inp->inp_socket->so_rcv.sb_cc;
   1297       1.97    atatat 			pcb.ki_sndq = inp->inp_socket->so_snd.sb_cc;
   1298       1.97    atatat 
   1299       1.97    atatat 			in = satosin(&pcb.ki_src);
   1300       1.97    atatat 			in->sin_len = sizeof(*in);
   1301       1.97    atatat 			in->sin_family = pf;
   1302       1.97    atatat 			in->sin_port = inp->inp_lport;
   1303       1.97    atatat 			in->sin_addr = inp->inp_laddr;
   1304       1.97    atatat 			if (pcb.ki_prstate >= INP_CONNECTED) {
   1305       1.97    atatat 				in = satosin(&pcb.ki_dst);
   1306       1.97    atatat 				in->sin_len = sizeof(*in);
   1307       1.97    atatat 				in->sin_family = pf;
   1308       1.97    atatat 				in->sin_port = inp->inp_fport;
   1309       1.97    atatat 				in->sin_addr = inp->inp_faddr;
   1310       1.97    atatat 			}
   1311       1.97    atatat 			break;
   1312       1.97    atatat #endif
   1313       1.97    atatat #ifdef INET6
   1314       1.97    atatat 		case PF_INET6:
   1315       1.97    atatat 			pcb.ki_family = in6p->in6p_socket->so_proto->
   1316       1.97    atatat 			    pr_domain->dom_family;
   1317       1.97    atatat 			pcb.ki_type = in6p->in6p_socket->so_proto->pr_type;
   1318       1.97    atatat 			pcb.ki_protocol = in6p->in6p_socket->so_proto->
   1319       1.97    atatat 			    pr_protocol;
   1320       1.97    atatat 			pcb.ki_pflags = in6p->in6p_flags;
   1321       1.97    atatat 
   1322       1.97    atatat 			pcb.ki_sostate = in6p->in6p_socket->so_state;
   1323       1.97    atatat 			pcb.ki_prstate = in6p->in6p_state;
   1324       1.97    atatat 			if (proto == IPPROTO_TCP) {
   1325       1.97    atatat 				tp = in6totcpcb(in6p);
   1326       1.97    atatat 				pcb.ki_tstate = tp->t_state;
   1327       1.97    atatat 				pcb.ki_tflags = tp->t_flags;
   1328       1.97    atatat 			}
   1329       1.97    atatat 
   1330       1.97    atatat 			pcb.ki_pcbaddr = PTRTOUINT64(in6p);
   1331       1.97    atatat 			pcb.ki_ppcbaddr = PTRTOUINT64(in6p->in6p_ppcb);
   1332       1.97    atatat 			pcb.ki_sockaddr = PTRTOUINT64(in6p->in6p_socket);
   1333       1.97    atatat 
   1334       1.97    atatat 			pcb.ki_rcvq = in6p->in6p_socket->so_rcv.sb_cc;
   1335       1.97    atatat 			pcb.ki_sndq = in6p->in6p_socket->so_snd.sb_cc;
   1336       1.97    atatat 
   1337       1.97    atatat 			in6 = satosin6(&pcb.ki_src);
   1338       1.97    atatat 			in6->sin6_len = sizeof(*in6);
   1339       1.97    atatat 			in6->sin6_family = pf;
   1340       1.97    atatat 			in6->sin6_port = in6p->in6p_lport;
   1341       1.97    atatat 			in6->sin6_flowinfo = in6p->in6p_flowinfo;
   1342       1.97    atatat 			in6->sin6_addr = in6p->in6p_laddr;
   1343       1.97    atatat 			in6->sin6_scope_id = 0; /* XXX? */
   1344       1.97    atatat 
   1345       1.97    atatat 			if (pcb.ki_prstate >= IN6P_CONNECTED) {
   1346       1.97    atatat 				in6 = satosin6(&pcb.ki_dst);
   1347       1.97    atatat 				in6->sin6_len = sizeof(*in6);
   1348       1.97    atatat 				in6->sin6_family = pf;
   1349       1.97    atatat 				in6->sin6_port = in6p->in6p_fport;
   1350       1.97    atatat 				in6->sin6_flowinfo = in6p->in6p_flowinfo;
   1351       1.97    atatat 				in6->sin6_addr = in6p->in6p_faddr;
   1352       1.97    atatat 				in6->sin6_scope_id = 0; /* XXX? */
   1353       1.97    atatat 			}
   1354       1.97    atatat 			break;
   1355       1.97    atatat #endif
   1356       1.97    atatat 		}
   1357       1.97    atatat 
   1358       1.97    atatat 		if (len >= elem_size && elem_count > 0) {
   1359       1.97    atatat 			error = copyout(&pcb, dp, out_size);
   1360       1.97    atatat 			if (error)
   1361       1.97    atatat 				return (error);
   1362       1.97    atatat 			dp += elem_size;
   1363       1.97    atatat 			len -= elem_size;
   1364       1.97    atatat 		}
   1365       1.97    atatat 		if (elem_count > 0) {
   1366       1.97    atatat 			needed += elem_size;
   1367       1.97    atatat 			if (elem_count != INT_MAX)
   1368       1.97    atatat 				elem_count--;
   1369       1.97    atatat 		}
   1370       1.97    atatat 	}
   1371       1.97    atatat 
   1372       1.97    atatat 	*oldlenp = needed;
   1373       1.97    atatat 	if (oldp == NULL)
   1374       1.97    atatat 		*oldlenp += PCB_SLOP * sizeof(struct kinfo_pcb);
   1375       1.97    atatat 
   1376       1.97    atatat 	return (error);
   1377       1.97    atatat }
   1378       1.97    atatat 
   1379       1.97    atatat /*
   1380       1.86    atatat  * this (second stage) setup routine is a replacement for tcp_sysctl()
   1381       1.86    atatat  * (which is currently used for ipv4 and ipv6)
   1382       1.86    atatat  */
   1383       1.86    atatat static void
   1384       1.87    atatat sysctl_net_inet_tcp_setup2(struct sysctllog **clog, int pf, const char *pfname,
   1385       1.87    atatat 			   const char *tcpname)
   1386       1.86    atatat {
   1387      1.106    atatat 	const struct sysctlnode *sack_node;
   1388      1.109    rpaulo #ifdef TCP_DEBUG
   1389      1.109    rpaulo 	extern struct tcp_debug tcp_debug[TCP_NDEBUG];
   1390      1.109    rpaulo 	extern int tcp_debx;
   1391      1.109    rpaulo #endif
   1392       1.76  christos 
   1393       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1394       1.87    atatat 		       CTLFLAG_PERMANENT,
   1395       1.86    atatat 		       CTLTYPE_NODE, "net", NULL,
   1396       1.86    atatat 		       NULL, 0, NULL, 0,
   1397       1.86    atatat 		       CTL_NET, CTL_EOL);
   1398       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1399       1.87    atatat 		       CTLFLAG_PERMANENT,
   1400       1.86    atatat 		       CTLTYPE_NODE, pfname, NULL,
   1401       1.86    atatat 		       NULL, 0, NULL, 0,
   1402       1.86    atatat 		       CTL_NET, pf, CTL_EOL);
   1403       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1404       1.87    atatat 		       CTLFLAG_PERMANENT,
   1405       1.92    atatat 		       CTLTYPE_NODE, tcpname,
   1406       1.92    atatat 		       SYSCTL_DESCR("TCP related settings"),
   1407       1.86    atatat 		       NULL, 0, NULL, 0,
   1408       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, CTL_EOL);
   1409       1.86    atatat 
   1410       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1411       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1412       1.92    atatat 		       CTLTYPE_INT, "rfc1323",
   1413       1.92    atatat 		       SYSCTL_DESCR("Enable RFC1323 TCP extensions"),
   1414       1.86    atatat 		       NULL, 0, &tcp_do_rfc1323, 0,
   1415       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_RFC1323, CTL_EOL);
   1416       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1417       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1418       1.92    atatat 		       CTLTYPE_INT, "sendspace",
   1419       1.92    atatat 		       SYSCTL_DESCR("Default TCP send buffer size"),
   1420       1.86    atatat 		       NULL, 0, &tcp_sendspace, 0,
   1421       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SENDSPACE, CTL_EOL);
   1422       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1423       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1424       1.92    atatat 		       CTLTYPE_INT, "recvspace",
   1425       1.92    atatat 		       SYSCTL_DESCR("Default TCP receive buffer size"),
   1426       1.86    atatat 		       NULL, 0, &tcp_recvspace, 0,
   1427       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_RECVSPACE, CTL_EOL);
   1428       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1429       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1430       1.92    atatat 		       CTLTYPE_INT, "mssdflt",
   1431       1.92    atatat 		       SYSCTL_DESCR("Default maximum segment size"),
   1432       1.86    atatat 		       sysctl_net_inet_tcp_mssdflt, 0, &tcp_mssdflt, 0,
   1433       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_MSSDFLT, CTL_EOL);
   1434       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1435       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1436       1.92    atatat 		       CTLTYPE_INT, "syn_cache_limit",
   1437       1.92    atatat 		       SYSCTL_DESCR("Maximum number of entries in the TCP "
   1438       1.92    atatat 				    "compressed state engine"),
   1439       1.86    atatat 		       NULL, 0, &tcp_syn_cache_limit, 0,
   1440       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_CACHE_LIMIT,
   1441       1.86    atatat 		       CTL_EOL);
   1442       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1443       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1444       1.92    atatat 		       CTLTYPE_INT, "syn_bucket_limit",
   1445       1.92    atatat 		       SYSCTL_DESCR("Maximum number of entries per hash "
   1446       1.92    atatat 				    "bucket in the TCP compressed state "
   1447       1.92    atatat 				    "engine"),
   1448       1.86    atatat 		       NULL, 0, &tcp_syn_bucket_limit, 0,
   1449       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_BUCKET_LIMIT,
   1450       1.86    atatat 		       CTL_EOL);
   1451       1.86    atatat #if 0 /* obsoleted */
   1452       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1453       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1454       1.92    atatat 		       CTLTYPE_INT, "syn_cache_interval",
   1455       1.92    atatat 		       SYSCTL_DESCR("TCP compressed state engine's timer interval"),
   1456       1.86    atatat 		       NULL, 0, &tcp_syn_cache_interval, 0,
   1457       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_CACHE_INTER,
   1458       1.86    atatat 		       CTL_EOL);
   1459       1.86    atatat #endif
   1460       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1461       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1462       1.92    atatat 		       CTLTYPE_INT, "init_win",
   1463       1.92    atatat 		       SYSCTL_DESCR("Initial TCP congestion window"),
   1464       1.86    atatat 		       NULL, 0, &tcp_init_win, 0,
   1465       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_INIT_WIN, CTL_EOL);
   1466       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1467       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1468       1.92    atatat 		       CTLTYPE_INT, "mss_ifmtu",
   1469       1.92    atatat 		       SYSCTL_DESCR("Use interface MTU for calculating MSS"),
   1470       1.86    atatat 		       NULL, 0, &tcp_mss_ifmtu, 0,
   1471       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_MSS_IFMTU, CTL_EOL);
   1472      1.102  kurahone 	sysctl_createv(clog, 0, NULL, &sack_node,
   1473      1.102  kurahone 		       CTLFLAG_PERMANENT,
   1474      1.102  kurahone 		       CTLTYPE_NODE, "sack",
   1475      1.102  kurahone 		       SYSCTL_DESCR("RFC2018 Selective ACKnowledgement tunables"),
   1476      1.102  kurahone 		       NULL, 0, NULL, 0,
   1477       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_EOL);
   1478       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1479       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1480       1.92    atatat 		       CTLTYPE_INT, "win_scale",
   1481       1.92    atatat 		       SYSCTL_DESCR("Use RFC1323 window scale options"),
   1482       1.86    atatat 		       NULL, 0, &tcp_do_win_scale, 0,
   1483       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_WSCALE, CTL_EOL);
   1484       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1485       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1486       1.92    atatat 		       CTLTYPE_INT, "timestamps",
   1487       1.92    atatat 		       SYSCTL_DESCR("Use RFC1323 time stamp options"),
   1488       1.86    atatat 		       NULL, 0, &tcp_do_timestamps, 0,
   1489       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_TSTAMP, CTL_EOL);
   1490       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1491       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1492       1.92    atatat 		       CTLTYPE_INT, "compat_42",
   1493       1.92    atatat 		       SYSCTL_DESCR("Enable workarounds for 4.2BSD TCP bugs"),
   1494       1.86    atatat 		       NULL, 0, &tcp_compat_42, 0,
   1495       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_COMPAT_42, CTL_EOL);
   1496       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1497       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1498       1.92    atatat 		       CTLTYPE_INT, "cwm",
   1499       1.92    atatat 		       SYSCTL_DESCR("Hughes/Touch/Heidemann Congestion Window "
   1500       1.92    atatat 				    "Monitoring"),
   1501       1.86    atatat 		       NULL, 0, &tcp_cwm, 0,
   1502       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_CWM, CTL_EOL);
   1503       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1504       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1505       1.92    atatat 		       CTLTYPE_INT, "cwm_burstsize",
   1506       1.92    atatat 		       SYSCTL_DESCR("Congestion Window Monitoring allowed "
   1507       1.92    atatat 				    "burst count in packets"),
   1508       1.86    atatat 		       NULL, 0, &tcp_cwm_burstsize, 0,
   1509       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_CWM_BURSTSIZE,
   1510       1.86    atatat 		       CTL_EOL);
   1511       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1512       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1513       1.92    atatat 		       CTLTYPE_INT, "ack_on_push",
   1514       1.92    atatat 		       SYSCTL_DESCR("Immediately return ACK when PSH is "
   1515       1.92    atatat 				    "received"),
   1516       1.86    atatat 		       NULL, 0, &tcp_ack_on_push, 0,
   1517       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_ACK_ON_PUSH, CTL_EOL);
   1518       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1519       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1520       1.92    atatat 		       CTLTYPE_INT, "keepidle",
   1521       1.92    atatat 		       SYSCTL_DESCR("Allowed connection idle ticks before a "
   1522       1.92    atatat 				    "keepalive probe is sent"),
   1523       1.86    atatat 		       NULL, 0, &tcp_keepidle, 0,
   1524       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPIDLE, CTL_EOL);
   1525       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1526       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1527       1.92    atatat 		       CTLTYPE_INT, "keepintvl",
   1528       1.92    atatat 		       SYSCTL_DESCR("Ticks before next keepalive probe is sent"),
   1529       1.86    atatat 		       NULL, 0, &tcp_keepintvl, 0,
   1530       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPINTVL, CTL_EOL);
   1531       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1532       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1533       1.92    atatat 		       CTLTYPE_INT, "keepcnt",
   1534       1.92    atatat 		       SYSCTL_DESCR("Number of keepalive probes to send"),
   1535       1.86    atatat 		       NULL, 0, &tcp_keepcnt, 0,
   1536       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPCNT, CTL_EOL);
   1537       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1538       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_IMMEDIATE,
   1539       1.92    atatat 		       CTLTYPE_INT, "slowhz",
   1540       1.92    atatat 		       SYSCTL_DESCR("Keepalive ticks per second"),
   1541       1.86    atatat 		       NULL, PR_SLOWHZ, NULL, 0,
   1542       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SLOWHZ, CTL_EOL);
   1543       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1544       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1545       1.92    atatat 		       CTLTYPE_INT, "newreno",
   1546       1.92    atatat 		       SYSCTL_DESCR("NewReno congestion control algorithm"),
   1547       1.86    atatat 		       NULL, 0, &tcp_do_newreno, 0,
   1548       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_NEWRENO, CTL_EOL);
   1549       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1550       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1551       1.92    atatat 		       CTLTYPE_INT, "log_refused",
   1552       1.92    atatat 		       SYSCTL_DESCR("Log refused TCP connections"),
   1553       1.86    atatat 		       NULL, 0, &tcp_log_refused, 0,
   1554       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_LOG_REFUSED, CTL_EOL);
   1555       1.86    atatat #if 0 /* obsoleted */
   1556       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1557       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1558       1.86    atatat 		       CTLTYPE_INT, "rstratelimit", NULL,
   1559       1.86    atatat 		       NULL, 0, &tcp_rst_ratelim, 0,
   1560       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_RSTRATELIMIT, CTL_EOL);
   1561       1.86    atatat #endif
   1562       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1563       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1564       1.92    atatat 		       CTLTYPE_INT, "rstppslimit",
   1565       1.92    atatat 		       SYSCTL_DESCR("Maximum number of RST packets to send "
   1566       1.92    atatat 				    "per second"),
   1567       1.86    atatat 		       NULL, 0, &tcp_rst_ppslim, 0,
   1568       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_RSTPPSLIMIT, CTL_EOL);
   1569       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1570       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1571       1.92    atatat 		       CTLTYPE_INT, "delack_ticks",
   1572       1.92    atatat 		       SYSCTL_DESCR("Number of ticks to delay sending an ACK"),
   1573       1.86    atatat 		       NULL, 0, &tcp_delack_ticks, 0,
   1574       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_DELACK_TICKS, CTL_EOL);
   1575       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1576       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1577       1.92    atatat 		       CTLTYPE_INT, "init_win_local",
   1578       1.92    atatat 		       SYSCTL_DESCR("Initial TCP window size (in segments)"),
   1579       1.86    atatat 		       NULL, 0, &tcp_init_win_local, 0,
   1580       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_INIT_WIN_LOCAL,
   1581       1.86    atatat 		       CTL_EOL);
   1582       1.87    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1583       1.87    atatat 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1584       1.92    atatat 		       CTLTYPE_STRUCT, "ident",
   1585       1.92    atatat 		       SYSCTL_DESCR("RFC1413 Identification Protocol lookups"),
   1586       1.86    atatat 		       sysctl_net_inet_tcp_ident, 0, NULL, sizeof(uid_t),
   1587       1.86    atatat 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_IDENT, CTL_EOL);
   1588       1.93   thorpej 	sysctl_createv(clog, 0, NULL, NULL,
   1589       1.93   thorpej 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1590       1.93   thorpej 		       CTLTYPE_INT, "do_loopback_cksum",
   1591       1.93   thorpej 		       SYSCTL_DESCR("Perform TCP checksum on loopback"),
   1592       1.93   thorpej 		       NULL, 0, &tcp_do_loopback_cksum, 0,
   1593       1.93   thorpej 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_LOOPBACKCKSUM,
   1594       1.93   thorpej 		       CTL_EOL);
   1595       1.97    atatat 	sysctl_createv(clog, 0, NULL, NULL,
   1596       1.97    atatat 		       CTLFLAG_PERMANENT,
   1597      1.100    atatat 		       CTLTYPE_STRUCT, "pcblist",
   1598       1.97    atatat 		       SYSCTL_DESCR("TCP protocol control block list"),
   1599       1.97    atatat 		       sysctl_inpcblist, 0, &tcbtable, 0,
   1600       1.97    atatat 		       CTL_NET, pf, IPPROTO_TCP, CTL_CREATE,
   1601       1.97    atatat 		       CTL_EOL);
   1602      1.102  kurahone 
   1603      1.102  kurahone 	/* SACK gets it's own little subtree. */
   1604      1.102  kurahone 	sysctl_createv(clog, 0, NULL, &sack_node,
   1605      1.102  kurahone 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1606      1.102  kurahone 		       CTLTYPE_INT, "enable",
   1607      1.102  kurahone 		       SYSCTL_DESCR("Enable RFC2018 Selective ACKnowledgement"),
   1608      1.102  kurahone 		       NULL, 0, &tcp_do_sack, 0,
   1609      1.102  kurahone 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_CREATE, CTL_EOL);
   1610      1.102  kurahone 	sysctl_createv(clog, 0, NULL, &sack_node,
   1611      1.102  kurahone 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1612      1.102  kurahone 		       CTLTYPE_INT, "maxholes",
   1613      1.102  kurahone 		       SYSCTL_DESCR("Maximum number of TCP SACK holes allowed per connection"),
   1614      1.102  kurahone 		       NULL, 0, &tcp_sack_tp_maxholes, 0,
   1615      1.102  kurahone 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_CREATE, CTL_EOL);
   1616      1.102  kurahone 	sysctl_createv(clog, 0, NULL, &sack_node,
   1617      1.102  kurahone 		       CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
   1618      1.102  kurahone 		       CTLTYPE_INT, "globalmaxholes",
   1619      1.102  kurahone 		       SYSCTL_DESCR("Global maximum number of TCP SACK holes"),
   1620      1.102  kurahone 		       NULL, 0, &tcp_sack_globalmaxholes, 0,
   1621      1.102  kurahone 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_CREATE, CTL_EOL);
   1622      1.102  kurahone 	sysctl_createv(clog, 0, NULL, &sack_node,
   1623      1.102  kurahone 		       CTLFLAG_PERMANENT,
   1624      1.102  kurahone 		       CTLTYPE_INT, "globalholes",
   1625      1.102  kurahone 		       SYSCTL_DESCR("Global number of TCP SACK holes"),
   1626      1.102  kurahone 		       NULL, 0, &tcp_sack_globalholes, 0,
   1627      1.102  kurahone 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_CREATE, CTL_EOL);
   1628      1.107      elad 
   1629      1.107      elad 	sysctl_createv(clog, 0, NULL, NULL,
   1630      1.107      elad 		       CTLFLAG_PERMANENT,
   1631      1.107      elad 		       CTLTYPE_STRUCT, "stats",
   1632      1.107      elad 		       SYSCTL_DESCR("TCP statistics"),
   1633      1.107      elad 		       NULL, 0, &tcpstat, sizeof(tcpstat),
   1634      1.107      elad 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_STATS,
   1635      1.107      elad 		       CTL_EOL);
   1636      1.109    rpaulo #ifdef TCP_DEBUG
   1637      1.109    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1638      1.109    rpaulo 		       CTLFLAG_PERMANENT,
   1639      1.109    rpaulo 		       CTLTYPE_STRUCT, "debug",
   1640      1.109    rpaulo 		       SYSCTL_DESCR("TCP sockets debug information"),
   1641      1.109    rpaulo 		       NULL, 0, &tcp_debug, sizeof(tcp_debug),
   1642      1.109    rpaulo 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_DEBUG,
   1643      1.109    rpaulo 		       CTL_EOL);
   1644      1.109    rpaulo 	sysctl_createv(clog, 0, NULL, NULL,
   1645      1.109    rpaulo 		       CTLFLAG_PERMANENT,
   1646      1.109    rpaulo 		       CTLTYPE_INT, "debx",
   1647      1.110    rpaulo 		       SYSCTL_DESCR("Number of TCP debug sockets messages"),
   1648      1.109    rpaulo 		       NULL, 0, &tcp_debx, sizeof(tcp_debx),
   1649      1.109    rpaulo 		       CTL_NET, pf, IPPROTO_TCP, TCPCTL_DEBX,
   1650      1.109    rpaulo 		       CTL_EOL);
   1651      1.109    rpaulo #endif
   1652      1.109    rpaulo 
   1653       1.86    atatat }
   1654       1.86    atatat 
   1655       1.86    atatat /*
   1656       1.86    atatat  * Sysctl for tcp variables.
   1657       1.86    atatat  */
   1658       1.86    atatat #ifdef INET
   1659       1.86    atatat SYSCTL_SETUP(sysctl_net_inet_tcp_setup, "sysctl net.inet.tcp subtree setup")
   1660       1.76  christos {
   1661       1.76  christos 
   1662       1.87    atatat 	sysctl_net_inet_tcp_setup2(clog, PF_INET, "inet", "tcp");
   1663       1.86    atatat }
   1664       1.86    atatat #endif /* INET */
   1665       1.76  christos 
   1666       1.86    atatat #ifdef INET6
   1667       1.86    atatat SYSCTL_SETUP(sysctl_net_inet6_tcp6_setup, "sysctl net.inet6.tcp6 subtree setup")
   1668       1.86    atatat {
   1669       1.76  christos 
   1670       1.87    atatat 	sysctl_net_inet_tcp_setup2(clog, PF_INET6, "inet6", "tcp6");
   1671        1.1       cgd }
   1672       1.86    atatat #endif /* INET6 */
   1673