esp_var.h revision 1.2.2.4 1 1.2.2.4 skrll /* $NetBSD: esp_var.h,v 1.2.2.4 2004/09/21 13:37:48 skrll Exp $ */
2 1.2.2.2 skrll /* $FreeBSD: src/sys/netipsec/esp_var.h,v 1.1.4.1 2003/01/24 05:11:35 sam Exp $ */
3 1.2.2.2 skrll /* $OpenBSD: ip_esp.h,v 1.37 2002/06/09 16:26:10 itojun Exp $ */
4 1.2.2.2 skrll /*
5 1.2.2.2 skrll * The authors of this code are John Ioannidis (ji (at) tla.org),
6 1.2.2.2 skrll * Angelos D. Keromytis (kermit (at) csd.uch.gr) and
7 1.2.2.2 skrll * Niels Provos (provos (at) physnet.uni-hamburg.de).
8 1.2.2.2 skrll *
9 1.2.2.2 skrll * The original version of this code was written by John Ioannidis
10 1.2.2.2 skrll * for BSD/OS in Athens, Greece, in November 1995.
11 1.2.2.2 skrll *
12 1.2.2.2 skrll * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
13 1.2.2.2 skrll * by Angelos D. Keromytis.
14 1.2.2.2 skrll *
15 1.2.2.2 skrll * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
16 1.2.2.2 skrll * and Niels Provos.
17 1.2.2.2 skrll *
18 1.2.2.2 skrll * Additional features in 1999 by Angelos D. Keromytis.
19 1.2.2.2 skrll *
20 1.2.2.2 skrll * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis,
21 1.2.2.2 skrll * Angelos D. Keromytis and Niels Provos.
22 1.2.2.2 skrll * Copyright (c) 2001 Angelos D. Keromytis.
23 1.2.2.2 skrll *
24 1.2.2.2 skrll * Permission to use, copy, and modify this software with or without fee
25 1.2.2.2 skrll * is hereby granted, provided that this entire notice is included in
26 1.2.2.2 skrll * all copies of any software which is or includes a copy or
27 1.2.2.2 skrll * modification of this software.
28 1.2.2.2 skrll * You may use this code under the GNU public license if you so wish. Please
29 1.2.2.2 skrll * contribute changes back to the authors under this freer than GPL license
30 1.2.2.2 skrll * so that we may further the use of strong encryption without limitations to
31 1.2.2.2 skrll * all.
32 1.2.2.2 skrll *
33 1.2.2.2 skrll * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
34 1.2.2.2 skrll * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
35 1.2.2.2 skrll * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
36 1.2.2.2 skrll * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
37 1.2.2.2 skrll * PURPOSE.
38 1.2.2.2 skrll */
39 1.2.2.2 skrll
40 1.2.2.2 skrll #ifndef _NETIPSEC_ESP_VAR_H_
41 1.2.2.2 skrll #define _NETIPSEC_ESP_VAR_H_
42 1.2.2.2 skrll
43 1.2.2.2 skrll /*
44 1.2.2.2 skrll * These define the algorithm indices into the histogram. They're
45 1.2.2.2 skrll * presently based on the PF_KEY v2 protocol values which is bogus;
46 1.2.2.2 skrll * they should be decoupled from the protocol at which time we can
47 1.2.2.2 skrll * pack them and reduce the size of the array to a reasonable value.
48 1.2.2.2 skrll */
49 1.2.2.2 skrll #define ESP_ALG_MAX 256 /* NB: could be < but skipjack is 249 */
50 1.2.2.2 skrll
51 1.2.2.2 skrll struct espstat {
52 1.2.2.2 skrll u_int64_t esps_hdrops; /* Packet shorter than header shows */
53 1.2.2.2 skrll u_int64_t esps_nopf; /* Protocol family not supported */
54 1.2.2.2 skrll u_int64_t esps_notdb;
55 1.2.2.2 skrll u_int64_t esps_badkcr;
56 1.2.2.2 skrll u_int64_t esps_qfull;
57 1.2.2.2 skrll u_int64_t esps_noxform;
58 1.2.2.2 skrll u_int64_t esps_badilen;
59 1.2.2.2 skrll u_int64_t esps_wrap; /* Replay counter wrapped around */
60 1.2.2.2 skrll u_int64_t esps_badenc; /* Bad encryption detected */
61 1.2.2.2 skrll u_int64_t esps_badauth; /* Only valid for transforms with auth */
62 1.2.2.2 skrll u_int64_t esps_replay; /* Possible packet replay detected */
63 1.2.2.2 skrll u_int64_t esps_input; /* Input ESP packets */
64 1.2.2.2 skrll u_int64_t esps_output; /* Output ESP packets */
65 1.2.2.2 skrll u_int64_t esps_invalid; /* Trying to use an invalid TDB */
66 1.2.2.2 skrll u_int64_t esps_ibytes; /* Input bytes */
67 1.2.2.2 skrll u_int64_t esps_obytes; /* Output bytes */
68 1.2.2.2 skrll u_int64_t esps_toobig; /* Packet got larger than IP_MAXPACKET */
69 1.2.2.2 skrll u_int64_t esps_pdrops; /* Packet blocked due to policy */
70 1.2.2.2 skrll u_int64_t esps_crypto; /* Crypto processing failure */
71 1.2.2.2 skrll u_int64_t esps_tunnel; /* Tunnel sanity check failure */
72 1.2.2.2 skrll u_int64_t esps_hist[ESP_ALG_MAX]; /* Per-algorithm op count */
73 1.2.2.2 skrll };
74 1.2.2.2 skrll
75 1.2.2.2 skrll #ifdef _KERNEL
76 1.2.2.2 skrll extern int esp_enable;
77 1.2.2.2 skrll extern struct espstat espstat;
78 1.2.2.2 skrll #endif /* _KERNEL */
79 1.2.2.2 skrll #endif /*_NETIPSEC_ESP_VAR_H_*/
80