Andrew Thompson bdea400f3b Add a pseudo interface for packet filtering IPSec connections before or after
encryption. There are two functions, a bpf tap which has a basic header with
the SPI number which our current tcpdump knows how to display, and handoff to
pfil(9) for packet filtering.

Obtained from:	OpenBSD
Based on:	kern/94829
No objections:	arch, net
MFC after:	1 month
2006-06-26 22:30:08 +00:00
..
2006-06-26 18:37:36 +00:00
2006-06-16 10:25:06 +00:00
2006-06-08 17:40:02 +00:00
2006-05-26 13:54:27 +00:00
2006-05-29 19:29:41 +00:00