summaryrefslogtreecommitdiffstats
path: root/sys/net/if_pflow.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* ip_output() using varargs always struck me as bizarre, esp since it's onlyhenning2014-04-211-2/+3
| | | | | | ever used to pass on uint32 (for ipsec). stop that madness and just pass the uint32, 0 in all cases but the two that pass the ipsec flowinfo. ok deraadt reyk guenther
* "struct pkthdr" holds a routing table ID, not a routing domain one.mpi2014-04-141-2/+2
| | | | | | | | | | | | | | Avoid the confusion by using an appropriate name for the variable. Note that since routing domain IDs are a subset of the set of routing table IDs, the following idiom is correct: rtableid = rdomain But to get the routing domain ID corresponding to a given routing table ID, you must call rtable_l2(9). claudio@ likes it, ok mikeb@
* Kill pflowproto 9, it's unfixable post 2038, a better, standardizedflorian2014-03-291-440/+13
| | | | | | option is pflowproto 10. Also it duplicates a lot of code from pflowproto 10 and will get in the way in the future. OK benno@
* computing the ip csum just before the bpf mtap and only if there is ahenning2014-01-241-4/+2
| | | | | consumer just to please tcpdump is stupid and not done anywhere else. kill with fire. ok benno
* allow pflow(4) to determine the src IP address based on the routebenno2014-01-211-3/+1
| | | | | | table if flowsrc is not set. Now works with new udp checksum code. From Nathanael Rensen (nathanael.openbsd AT list DOT polymorpheus DOT com), tweak and ok florian@
* Send pflow(4) packets in the correct rdomain.florian2013-11-011-1/+2
| | | | | From Anders Berggren (anders AT halon DOT se), thanks. OK henning, benno
* simplify: no need to muck with the pseudo hdr cksum any morehenning2013-10-191-16/+3
| | | | ok lteo florian
* The header file netinet/in_var.h included netinet6/in6_var.h. Thisbluhm2013-10-171-2/+1
| | | | | | | created a bunch of useless dependencies. Remove this implicit inclusion and do an explicit #include <netinet6/in6_var.h> when it is needed. OK mpi@ henning@
* Don't send flows if flowsrc is not set. Packages had a brokenflorian2013-09-131-12/+20
| | | | | | | | | | checksum. Since no one seems to have a use case for sending flows from INADDR_ANY disallow this. Pointed out by Nathanael Rensen on tech@, thanks. While there make the SIOCSIFFLAGS and SIOCSETPFLOW cases symmetric by only sending templates if the interface is running. OK benno@
* Split pflow version 9 and version 10 to be able to send 64 bitflorian2013-08-131-263/+578
| | | | | | time values for version 10. While there mark places which will blow up in 2038. OK benno@
* Cancel timeouts on pflow interface destruction.florian2013-08-101-1/+7
| | | | OK benno@
* bring back pflow v10; broken in previous commit, sorry.florian2013-07-051-1/+2
| | | | ok benno@
* export the original aka untranslated address for af-to in pflowflorian2013-05-311-38/+39
| | | | | inspired by benno@'s previous diff for nat-to tests/ok benno@
* export the original aka untranslated address in pflowbenno2013-05-301-4/+8
| | | | ok florian@ henning@
* Export ingress/egress interface index in pflow(4).florian2013-05-031-3/+27
| | | | | | | Report that this is needed for some netflow collector and tests by Chris Ivancic & Colin Ligertwood. OK mikeb@, benno@
* Remove various external variable declaration from sources files andmpi2013-04-101-5/+1
| | | | | | | move them to the corresponding header with an appropriate comment if necessary. ok guenther@
* code that calls timeout functions should include timeout.htedu2013-03-281-1/+2
| | | | | slipped by on i386, but the zaurus doesn't automagically pick it up. spotted by patrick
* no need for a lot of code to include proc.htedu2013-03-281-2/+1
|
* Remove various read-only *maxlen variables and use IFQ_MAXLEN directly.mpi2013-03-261-2/+2
| | | | ok beck@, mikeb@
* netflow v10 omitted the sysUpTime flow set header field fromflorian2013-02-051-35/+90
| | | | | | | | | | | | v9. Without it it's not possible to find out at what time a flow started/ended with only flowStartSysUpTime/flowEndSysUpTime. Fix this by using flowStartSeconds/flowEndSeconds for v10. Problem reported by Chris Ivancic and Colin Ligertwood, analyzed by benno@ Tested by benno@ against nprobe (which doesn't care that much one way or the other) Tested by Chris Ivancic against solarwinds collector. OK benno@
* switch from using softclock ticks to getnanotime when putting time on thedlg2013-01-161-6/+6
| | | | | | wire for v5 packets. ok (and lots of gentle prodding from) florian@
* wrap bpfilter portion with #if NBPFILTER > 0.gsoares2012-11-081-1/+3
| | | | | | fix kernel builds without bpfilter. OK sthen@ mikeb@ deraadt@ henning@
* Use time_uptime for expiration values as time_second can be skewed atflorian2012-10-301-19/+28
| | | | | | | | | | | | | | | | runtime while time_uptime is monotonic. Prevent underflows in pfsync(4) and pflow(4) by using signed variables. pfsync(4) problem pointed out by camield. Diff originally by dlg, frag and pflow bits by me. feedback dlg man page tweak jmc Various versions of the pflow bits tested by Hrvoje Popovski (hrvoje AT srce DOT hr), thanks! ok benno, henning, dlg
* fix all the suser calls which pass an incorrect p_acflag argument;mikeb2012-04-111-2/+2
| | | | figured out by and ok guenther
* add netflow v9/ipfix support to pflow(4).benno2012-02-021-44/+611
| | | | | | large parts written by Florian Obser (florian -at- narrans -dot- de). feedback from sperreault@ gollo@ sthen@ ok from gollo@ dlg@ henning@
* use time_uptime to set state creation values as time_second can bedlg2011-11-251-2/+2
| | | | | | | skewed at runtime by things like date(1) and ntpd. time_uptime is monotonic and therefore more useful to compare against. ok deraadt@ mikeb@
* honor the net.inet.udp.checksum setting.dhill2011-07-091-5/+11
| | | | ok claudio henning yasuoka
* cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhmhenning2011-07-061-2/+2
|
* mechanic rename M_{TCP|UDP}V4_CSUM_OUT -> M_{TCP|UDP}_CSUM_OUThenning2011-04-051-2/+2
| | | | ok claudio krw
* m_copyback can fail to allocate memory, but is a void fucntion so gymnasticsblambert2010-07-021-3/+3
| | | | | | | | | are required to detect that. Change the function to take a wait argument (used in nfs server, but M_NOWAIT everywhere else for now) and to return an error ok claudio@ henning@ krw@
* remove proc.h include from uvm_map.h. This has far reaching effects, astedu2010-04-201-1/+3
| | | | | | sysctl.h was reliant on this particular include, and many drivers included sysctl.h unnecessarily. remove sysctl.h or add proc.h as needed. ok deraadt
* Remove bpfdetach() call right in front of the if_detach() call sinceclaudio2010-01-121-4/+1
| | | | bpfdetach() will be called in if_detach(). Diff by Gleydson Soares
* fix flow data values: first and last time, found by f-kons at yandex rugollo2009-06-171-3/+7
| | | | OK: sthen@, henning@
* fix mbuf problems and simplify code, well spotted and input bygollo2009-02-271-112/+73
| | | | | | | | | Alexander Sabourenkov. mbuf logic is based on claudio's recommendation Tested by Alexander Sabourenkov OK: henning@, claudio@ Theo: "In please..."
* sync flow sequence ids on all used pflow interfaces.gollo2009-01-031-7/+11
| | | | OK henning@
* dont have bpf.h expose the kernel ticks variable wherever it is includeing.dlg2008-11-261-1/+4
| | | | | | it is very confusing like this. ok deraadt@ canacar@
* add support for multiple pflow(4) interfacesgollo2008-10-281-30/+38
| | | | OK: claudio@ henning@
* add bpf/tcpdump support to pflow(4)gollo2008-10-211-20/+26
| | | | ok canacar@ henning@
* Solve m_free problem with a not correctly configured pflow interfacegollo2008-09-171-8/+6
| | | | | | leading to a kernel crash reported in PR5930 OK claudio@ henning@
* fix whitespacesgollo2008-09-171-3/+3
| | | | ok henning@
* netstat statistics for pflow(4) via pseudo familygollo2008-09-161-1/+20
| | | | ok cluadio@ henning@
* fix whitespace/tab typosgollo2008-09-161-4/+4
| | | | ok henning@ claudio@
* welcome pflow(4), a netflow v5 compatible flow export interface.henning2008-09-091-0/+622
flows export data gathered from pf states. initial implementation by Joerg Goltermann <jg@osn.de>, guidance and many changes by me. 'put it in' theo
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.