eugen da9980e04a ipfw: implement ngtee/netgraph actions for layer-2 frames. ... Kernel part of ipfw does not support and ignores rules other than "pass", "deny" and dummynet-related for layer-2 (ethernet frames). Others are processed as "pass". Make it support ngtee/netgraph rules just like they are supported for IP packets. For example, this allows us to mirror some frames selectively to another interface for delivery to remote network analyzer over RSPAN vlan. Assuming ng_ipfw(4) netgraph node has a hook named "900" attached to "lower" hook of vlan900's ng_ether(4) node, that would be as simple as: ipfw add ngtee 900 ip from any to 8.8.8.8 layer2 out xmit igb0 PR: 213452 MFC after: 1 month Tested-by: Fyodor Ustinov <ufm@ufm.su>		2018-10-27 07:32:26 +00:00
..
nat64	Call inet_ntop() only when its result is needed.	2018-10-21 16:37:53 +00:00
nptv6	Use the new VNET_DEFINE_STATIC macro when we are defining static VNET	2018-07-24 16:35:52 +00:00
pmod	Use host byte order when comparing mss values.	2018-08-08 17:32:02 +00:00
test	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_aqm_codel.c	dummynet: Use strlcpy to appease static checkers	2017-04-13 17:47:44 +00:00
dn_aqm_codel.h
dn_aqm_pie.c	Fix the queue delay estimation in PIE/FQ-PIE when the timestamp	2017-05-19 08:38:03 +00:00
dn_aqm_pie.h	Change several constants used by the PIE algorithm from unsigned to signed.	2017-03-18 23:00:13 +00:00
dn_aqm.h
dn_heap.c	netpfil/ipfw: Make some use of mallocarray(9).	2018-01-11 15:29:29 +00:00
dn_heap.h	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched_fifo.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched_fq_codel_helper.h
dn_sched_fq_codel.c	Implement 'domainset', a cpuset based NUMA policy mechanism. This allows	2018-01-12 22:48:23 +00:00
dn_sched_fq_codel.h
dn_sched_fq_pie.c	netpfil/ipfw: Make some use of mallocarray(9).	2018-01-11 15:29:29 +00:00
dn_sched_prio.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched_qfq.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched_rr.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched_wf2q.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dn_sched.h	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
dummynet.txt
ip_dn_glue.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
ip_dn_io.c	Fix a typo in comment.	2018-08-15 16:36:29 +00:00
ip_dn_private.h	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
ip_dummynet.c	sys: general adoption of SPDX licensing ID tags.	2017-11-27 15:23:17 +00:00
ip_fw2.c	Add extra parentheses to fix "versrcreach" opcode, (oif != NULL) should	2018-10-15 10:25:34 +00:00
ip_fw_bpf.c	Use the new VNET_DEFINE_STATIC macro when we are defining static VNET	2018-07-24 16:35:52 +00:00
ip_fw_dynamic.c	Do not decrement RST life time if keep_alive is not turned on.	2018-10-21 16:44:57 +00:00
ip_fw_eaction.c	Add O_EXTERNAL_DATA opcode support.	2017-04-03 02:44:40 +00:00
ip_fw_iface.c	Remove "IPFW static rules" rmlock.	2017-04-03 13:35:04 +00:00
ip_fw_log.c	Add UDPLite support to ipfw(4).	2018-01-19 12:50:03 +00:00
ip_fw_nat.c	ifnet: Replace if_addr_lock rwlock with epoch + mutex	2018-05-18 20:13:34 +00:00
ip_fw_pfil.c	ipfw: implement ngtee/netgraph actions for layer-2 frames.	2018-10-27 07:32:26 +00:00
ip_fw_private.h	Rework ipfw dynamic states implementation to be lockless on fast path.	2018-02-07 18:59:54 +00:00
ip_fw_sockopt.c	Use the new VNET_DEFINE_STATIC macro when we are defining static VNET	2018-07-24 16:35:52 +00:00
ip_fw_table_algo.c	Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9).	2018-06-16 08:26:23 +00:00
ip_fw_table_value.c	Remove "IPFW static rules" rmlock.	2017-04-03 13:35:04 +00:00
ip_fw_table.c	Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero set	2018-04-11 11:12:20 +00:00
ip_fw_table.h