diff options
| author |   Eric Dumazet <edumazet@google.com> | 2016-08-24 09:01:23 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2016-08-25 16:43:11 -0700 |
| commit | 72145a68e4ee116533df49af4b87aca0aacc179c (patch) | |
| tree | 31b022a336cbd4cb3554a7b3a46f1e9ec35f6e1c /net/ipv6/tcp_ipv6.c | |
| parent | tcp: md5: increment sk_drops on syn_recv state (diff) | |
| download | linux-dev-72145a68e4ee116533df49af4b87aca0aacc179c.tar.xz linux-dev-72145a68e4ee116533df49af4b87aca0aacc179c.zip | |
tcp: md5: add LINUX_MIB_TCPMD5FAILURE counter
Adds SNMP counter for drops caused by MD5 mismatches.
The current syslog might help, but a counter is more precise and helps
monitoring.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/tcp_ipv6.c')
| -rw-r--r-- | net/ipv6/tcp_ipv6.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv6/tcp_ipv6.c b/net/ipv6/tcp_ipv6.c index ac0ed7bda406..e4f55683af31 100644 --- a/net/ipv6/tcp_ipv6.c +++ b/net/ipv6/tcp_ipv6.c @@ -671,6 +671,7 @@ static bool tcp_v6_inbound_md5_hash(const struct sock *sk, NULL, skb); if (genhash || memcmp(hash_location, newhash, 16) != 0) { + NET_INC_STATS(sock_net(sk), LINUX_MIB_TCPMD5FAILURE); net_info_ratelimited("MD5 Hash %s for [%pI6c]:%u->[%pI6c]:%u\n", genhash ? "failed" : "mismatch", &ip6h->saddr, ntohs(th->source), |