Andrew Thompson bdea400f3b Add a pseudo interface for packet filtering IPSec connections before or after ...

encryption. There are two functions, a bpf tap which has a basic header with
the SPI number which our current tcpdump knows how to display, and handoff to
pfil(9) for packet filtering.

Obtained from:	OpenBSD
Based on:	kern/94829
No objections:	arch, net
MFC after:	1 month

2006-06-26 22:30:08 +00:00

..

ah_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ah.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

esp_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

esp.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipcomp_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipcomp.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipip_var.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec6.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec_input.c

Add a pseudo interface for packet filtering IPSec connections before or after

2006-06-26 22:30:08 +00:00

ipsec_mbuf.c

promote fast ipsec's m_clone routine for public use; it is renamed

2006-03-15 21:11:11 +00:00

ipsec_osdep.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

ipsec_output.c

Add a pseudo interface for packet filtering IPSec connections before or after

2006-06-26 22:30:08 +00:00

ipsec.c

Change '#if INET' and '#if INET6' to '#ifdef INET' and '#ifdef INET6'.

2006-06-04 19:32:32 +00:00

ipsec.h

Add a pseudo interface for packet filtering IPSec connections before or after

2006-06-26 22:30:08 +00:00

key_debug.c

Fix -Wundef warnings found when compiling i386 LINT, GENERIC and

2005-12-05 11:58:35 +00:00

key_debug.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

key_var.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

key.c

Prevent disappearing SAD entries by implementing MPsafe refcounting.

2006-05-20 15:35:36 +00:00

key.h

/* -> /*- for license, minor formatting changes

2005-01-07 01:45:51 +00:00

keydb.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

keysock.c

Remove unused variables s and error in key_detach. The previous

2006-04-04 10:11:15 +00:00

keysock.h

Fix stack corruptions on amd64.

2006-01-21 10:44:34 +00:00

xform_ah.c

- The authsize field from auth_hash structure was removed.

2006-05-17 18:30:28 +00:00

xform_esp.c

- The authsize field from auth_hash structure was removed.

2006-05-17 18:30:28 +00:00

xform_ipcomp.c

Allow to use fast_ipsec(4) on debug.mpsafenet=0 and INVARIANTS-enabled

2006-03-23 23:26:34 +00:00

xform_ipip.c

Add a pseudo interface for packet filtering IPSec connections before or after

2006-06-26 22:30:08 +00:00

xform_tcp.c

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

xform.h

Fix more stack corruptions on amd64.

2006-03-30 18:57:04 +00:00