Home | History | Annotate | Line # | Download | only in netipsec
ah_var.h revision 1.1 
      1 /*	$NetBSD: ah_var.h,v 1.1 2003/08/13 20:06:49 jonathan Exp $	*/
      2 /*	$FreeBSD: src/sys/netipsec/ah_var.h,v 1.1.4.1 2003/01/24 05:11:35 sam Exp $	*/
      3 /*	$OpenBSD: ip_ah.h,v 1.29 2002/06/09 16:26:10 itojun Exp $	*/
      4 /*
      5  * The authors of this code are John Ioannidis (ji (at) tla.org),
      6  * Angelos D. Keromytis (kermit (at) csd.uch.gr) and
      7  * Niels Provos (provos (at) physnet.uni-hamburg.de).
      8  *
      9  * The original version of this code was written by John Ioannidis
     10  * for BSD/OS in Athens, Greece, in November 1995.
     11  *
     12  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
     13  * by Angelos D. Keromytis.
     14  *
     15  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
     16  * and Niels Provos.
     17  *
     18  * Additional features in 1999 by Angelos D. Keromytis.
     19  *
     20  * Copyright (C) 1995, 1996, 1997, 1998, 1999 John Ioannidis,
     21  * Angelos D. Keromytis and Niels Provos.
     22  * Copyright (c) 2001 Angelos D. Keromytis.
     23  *
     24  * Permission to use, copy, and modify this software with or without fee
     25  * is hereby granted, provided that this entire notice is included in
     26  * all copies of any software which is or includes a copy or
     27  * modification of this software.
     28  * You may use this code under the GNU public license if you so wish. Please
     29  * contribute changes back to the authors under this freer than GPL license
     30  * so that we may further the use of strong encryption without limitations to
     31  * all.
     32  *
     33  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
     34  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
     35  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
     36  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
     37  * PURPOSE.
     38  */
     39 
     40 #ifndef _NETIPSEC_AH_VAR_H_
     41 #define _NETIPSEC_AH_VAR_H_
     42 
     43 /*
     44  * These define the algorithm indices into the histogram.  They're
     45  * presently based on the PF_KEY v2 protocol values which is bogus;
     46  * they should be decoupled from the protocol at which time we can
     47  * pack them and reduce the size of the array to a minimum.
     48  */
     49 #define	AH_ALG_MAX	16
     50 
     51 struct ahstat {
     52 	u_int32_t	ahs_hdrops;	/* Packet shorter than header shows */
     53 	u_int32_t	ahs_nopf;	/* Protocol family not supported */
     54 	u_int32_t	ahs_notdb;
     55 	u_int32_t	ahs_badkcr;
     56 	u_int32_t	ahs_badauth;
     57 	u_int32_t	ahs_noxform;
     58 	u_int32_t	ahs_qfull;
     59 	u_int32_t	ahs_wrap;
     60 	u_int32_t	ahs_replay;
     61 	u_int32_t	ahs_badauthl;	/* Bad authenticator length */
     62 	u_int32_t	ahs_input;	/* Input AH packets */
     63 	u_int32_t	ahs_output;	/* Output AH packets */
     64 	u_int32_t	ahs_invalid;	/* Trying to use an invalid TDB */
     65 	u_int64_t	ahs_ibytes;	/* Input bytes */
     66 	u_int64_t	ahs_obytes;	/* Output bytes */
     67 	u_int32_t	ahs_toobig;	/* Packet got larger than IP_MAXPACKET */
     68 	u_int32_t	ahs_pdrops;	/* Packet blocked due to policy */
     69 	u_int32_t	ahs_crypto;	/* Crypto processing failure */
     70 	u_int32_t	ahs_tunnel;	/* Tunnel sanity check failure */
     71 	u_int32_t	ahs_hist[AH_ALG_MAX];	/* Per-algorithm op count */
     72 };
     73 
     74 #ifdef _KERNEL
     75 extern	int ah_enable;
     76 extern	int ah_cleartos;
     77 extern	struct ahstat ahstat;
     78 #endif /* _KERNEL */
     79 #endif /*_NETIPSEC_AH_VAR_H_*/
     80