diff options
Diffstat (limited to 'sys/net/pf_syncookies.c')
| -rw-r--r-- | sys/net/pf_syncookies.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/net/pf_syncookies.c b/sys/net/pf_syncookies.c index 511eb381997..2df85032dff 100644 --- a/sys/net/pf_syncookies.c +++ b/sys/net/pf_syncookies.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_syncookies.c,v 1.2 2018/02/07 01:50:48 dlg Exp $ */ +/* $OpenBSD: pf_syncookies.c,v 1.3 2018/02/07 05:48:47 henning Exp $ */ /* Copyright (c) 2016,2017 Henning Brauer <henning@openbsd.org> * Copyright (c) 2016 Alexandr Nedvedicky <sashan@openbsd.org> @@ -182,6 +182,7 @@ pf_synflood_check(struct pf_pdesc *pd) pf_status.syncookies_active = 1; DPFPRINTF(LOG_WARNING, "synflood detected, enabling syncookies"); + pf_status.lcounters[LCNT_SYNFLOODS]++; } return (pf_status.syncookies_active); @@ -199,6 +200,7 @@ pf_syncookie_send(struct pf_pdesc *pd) iss, ntohl(pd->hdr.tcp.th_seq) + 1, TH_SYN|TH_ACK, 0, mss, 0, 1, 0, pd->rdomain); pf_status.syncookies_inflight[pf_syncookie_status.oddeven]++; + pf_status.lcounters[LCNT_SYNCOOKIES_SENT]++; } uint8_t @@ -218,6 +220,7 @@ pf_syncookie_validate(struct pf_pdesc *pd) return (0); pf_status.syncookies_inflight[cookie.flags.oddeven]--; + pf_status.lcounters[LCNT_SYNCOOKIES_VALID]++; return (1); } |