diff options
| author |   ho <ho@openbsd.org> | 2005-05-28 15:10:07 +0000 |
|---|---|---|
| committer | ho <ho@openbsd.org> | 2005-05-28 15:10:07 +0000 |
| commit | c45b24e7e39a84ca8e974533b1439ffb569e1ee7 (patch) | |
| tree | 5ad3c289c82afd962eea749ffce2d348c0927938 /usr.sbin/tcpdump/print-pfsync.c | |
| parent | enable IFCAP_VLAN_MTU because IEEE 802.11 defines a MTU of about 2290. (diff) | |
| download | wireguard-openbsd-c45b24e7e39a84ca8e974533b1439ffb569e1ee7.tar.xz wireguard-openbsd-c45b24e7e39a84ca8e974533b1439ffb569e1ee7.zip | |
Add SA replay counter synchronization to pfsync(4). Required for IPsec
failover gateways. ok mcbride@, "looks good" hshoexer@
Diffstat (limited to '')
| -rw-r--r-- | usr.sbin/tcpdump/print-pfsync.c | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/usr.sbin/tcpdump/print-pfsync.c b/usr.sbin/tcpdump/print-pfsync.c index 4f87746dd1e..db6fac591b9 100644 --- a/usr.sbin/tcpdump/print-pfsync.c +++ b/usr.sbin/tcpdump/print-pfsync.c @@ -1,4 +1,4 @@ -/* $OpenBSD: print-pfsync.c,v 1.27 2004/07/07 23:48:40 mcbride Exp $ */ +/* $OpenBSD: print-pfsync.c,v 1.28 2005/05/28 15:10:07 ho Exp $ */ /* * Copyright (c) 2002 Michael Shalayeff @@ -28,7 +28,7 @@ #ifndef lint static const char rcsid[] = - "@(#) $Header: /home/cvs/src/usr.sbin/tcpdump/print-pfsync.c,v 1.27 2004/07/07 23:48:40 mcbride Exp $"; + "@(#) $Header: /home/cvs/src/usr.sbin/tcpdump/print-pfsync.c,v 1.28 2005/05/28 15:10:07 ho Exp $"; #endif #include <sys/param.h> @@ -116,6 +116,7 @@ pfsync_print(struct pfsync_header *hdr, int len) struct pfsync_state_clr *c; struct pfsync_state_upd_req *r; struct pfsync_state_bus *b; + struct pfsync_tdb *t; int i, flags = 0, min, sec; u_int64_t id; @@ -231,6 +232,14 @@ pfsync_print(struct pfsync_header *hdr, int len) } } break; + case PFSYNC_ACT_TDB_UPD: + for (i = 1, t = (void *)((char *)hdr + PFSYNC_HDRLEN); + i <= hdr->count && i * sizeof(*t) <= len; i++, t++) + printf("\n\tspi: %08x rpl: %u cur_bytes: %llu", + htonl(t->spi), htonl(t->rpl), + betoh64(t->cur_bytes)); + /* XXX add dst and sproto? */ + break; default: break; } |