Home | History | Annotate | Line # | Download | only in netipsec
esp_var.h revision 1.2.2.4
      1  1.2.2.4  skrll /*	$NetBSD: esp_var.h,v 1.2.2.4 2004/09/21 13:37:48 skrll Exp $	*/
      2  1.2.2.2  skrll /*	$FreeBSD: src/sys/netipsec/esp_var.h,v 1.1.4.1 2003/01/24 05:11:35 sam Exp $	*/
      3  1.2.2.2  skrll /*	$OpenBSD: ip_esp.h,v 1.37 2002/06/09 16:26:10 itojun Exp $	*/
      4  1.2.2.2  skrll /*
      5  1.2.2.2  skrll  * The authors of this code are John Ioannidis (ji (at) tla.org),
      6  1.2.2.2  skrll  * Angelos D. Keromytis (kermit (at) csd.uch.gr) and
      7  1.2.2.2  skrll  * Niels Provos (provos (at) physnet.uni-hamburg.de).
      8  1.2.2.2  skrll  *
      9  1.2.2.2  skrll  * The original version of this code was written by John Ioannidis
     10  1.2.2.2  skrll  * for BSD/OS in Athens, Greece, in November 1995.
     11  1.2.2.2  skrll  *
     12  1.2.2.2  skrll  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
     13  1.2.2.2  skrll  * by Angelos D. Keromytis.
     14  1.2.2.2  skrll  *
     15  1.2.2.2  skrll  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
     16  1.2.2.2  skrll  * and Niels Provos.
     17  1.2.2.2  skrll  *
     18  1.2.2.2  skrll  * Additional features in 1999 by Angelos D. Keromytis.
     19  1.2.2.2  skrll  *
     20  1.2.2.2  skrll  * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis,
     21  1.2.2.2  skrll  * Angelos D. Keromytis and Niels Provos.
     22  1.2.2.2  skrll  * Copyright (c) 2001 Angelos D. Keromytis.
     23  1.2.2.2  skrll  *
     24  1.2.2.2  skrll  * Permission to use, copy, and modify this software with or without fee
     25  1.2.2.2  skrll  * is hereby granted, provided that this entire notice is included in
     26  1.2.2.2  skrll  * all copies of any software which is or includes a copy or
     27  1.2.2.2  skrll  * modification of this software.
     28  1.2.2.2  skrll  * You may use this code under the GNU public license if you so wish. Please
     29  1.2.2.2  skrll  * contribute changes back to the authors under this freer than GPL license
     30  1.2.2.2  skrll  * so that we may further the use of strong encryption without limitations to
     31  1.2.2.2  skrll  * all.
     32  1.2.2.2  skrll  *
     33  1.2.2.2  skrll  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
     34  1.2.2.2  skrll  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
     35  1.2.2.2  skrll  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
     36  1.2.2.2  skrll  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
     37  1.2.2.2  skrll  * PURPOSE.
     38  1.2.2.2  skrll  */
     39  1.2.2.2  skrll 
     40  1.2.2.2  skrll #ifndef _NETIPSEC_ESP_VAR_H_
     41  1.2.2.2  skrll #define _NETIPSEC_ESP_VAR_H_
     42  1.2.2.2  skrll 
     43  1.2.2.2  skrll /*
     44  1.2.2.2  skrll  * These define the algorithm indices into the histogram.  They're
     45  1.2.2.2  skrll  * presently based on the PF_KEY v2 protocol values which is bogus;
     46  1.2.2.2  skrll  * they should be decoupled from the protocol at which time we can
     47  1.2.2.2  skrll  * pack them and reduce the size of the array to a reasonable value.
     48  1.2.2.2  skrll  */
     49  1.2.2.2  skrll #define	ESP_ALG_MAX	256		/* NB: could be < but skipjack is 249 */
     50  1.2.2.2  skrll 
     51  1.2.2.2  skrll struct espstat {
     52  1.2.2.2  skrll 	u_int64_t	esps_hdrops;	/* Packet shorter than header shows */
     53  1.2.2.2  skrll 	u_int64_t	esps_nopf;	/* Protocol family not supported */
     54  1.2.2.2  skrll 	u_int64_t	esps_notdb;
     55  1.2.2.2  skrll 	u_int64_t	esps_badkcr;
     56  1.2.2.2  skrll 	u_int64_t	esps_qfull;
     57  1.2.2.2  skrll 	u_int64_t	esps_noxform;
     58  1.2.2.2  skrll 	u_int64_t	esps_badilen;
     59  1.2.2.2  skrll 	u_int64_t	esps_wrap;	/* Replay counter wrapped around */
     60  1.2.2.2  skrll 	u_int64_t	esps_badenc;	/* Bad encryption detected */
     61  1.2.2.2  skrll 	u_int64_t	esps_badauth;	/* Only valid for transforms with auth */
     62  1.2.2.2  skrll 	u_int64_t	esps_replay;	/* Possible packet replay detected */
     63  1.2.2.2  skrll 	u_int64_t	esps_input;	/* Input ESP packets */
     64  1.2.2.2  skrll 	u_int64_t	esps_output;	/* Output ESP packets */
     65  1.2.2.2  skrll 	u_int64_t	esps_invalid;	/* Trying to use an invalid TDB */
     66  1.2.2.2  skrll 	u_int64_t	esps_ibytes;	/* Input bytes */
     67  1.2.2.2  skrll 	u_int64_t	esps_obytes;	/* Output bytes */
     68  1.2.2.2  skrll 	u_int64_t	esps_toobig;	/* Packet got larger than IP_MAXPACKET */
     69  1.2.2.2  skrll 	u_int64_t	esps_pdrops;	/* Packet blocked due to policy */
     70  1.2.2.2  skrll 	u_int64_t	esps_crypto;	/* Crypto processing failure */
     71  1.2.2.2  skrll 	u_int64_t	esps_tunnel;	/* Tunnel sanity check failure */
     72  1.2.2.2  skrll 	u_int64_t	esps_hist[ESP_ALG_MAX];	/* Per-algorithm op count */
     73  1.2.2.2  skrll };
     74  1.2.2.2  skrll 
     75  1.2.2.2  skrll #ifdef _KERNEL
     76  1.2.2.2  skrll extern	int esp_enable;
     77  1.2.2.2  skrll extern	struct espstat espstat;
     78  1.2.2.2  skrll #endif /* _KERNEL */
     79  1.2.2.2  skrll #endif /*_NETIPSEC_ESP_VAR_H_*/
     80