]>
Commit | Line | Data |
---|---|---|
1c79356b A |
1 | /* |
2 | * Copyright (c) 2000 Apple Computer, Inc. All rights reserved. | |
3 | * | |
4 | * @APPLE_LICENSE_HEADER_START@ | |
5 | * | |
6 | * The contents of this file constitute Original Code as defined in and | |
7 | * are subject to the Apple Public Source License Version 1.1 (the | |
8 | * "License"). You may not use this file except in compliance with the | |
9 | * License. Please obtain a copy of the License at | |
10 | * http://www.apple.com/publicsource and read it before using this file. | |
11 | * | |
12 | * This Original Code and all software distributed under the License are | |
13 | * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER | |
14 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, | |
15 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, | |
16 | * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the | |
17 | * License for the specific language governing rights and limitations | |
18 | * under the License. | |
19 | * | |
20 | * @APPLE_LICENSE_HEADER_END@ | |
21 | */ | |
22 | /* | |
23 | * Copyright (C) 1995-1997 by Darren Reed. | |
24 | * | |
25 | * Redistribution and use in source and binary forms are permitted | |
26 | * provided that this notice is preserved and due credit is given | |
27 | * to the original author and the contributors. | |
28 | * | |
29 | * @(#)ip_state.h 1.3 1/12/96 (C) 1995 Darren Reed | |
30 | */ | |
31 | #ifndef __IP_STATE_H__ | |
32 | #define __IP_STATE_H__ | |
33 | ||
34 | #define IPSTATE_SIZE 257 | |
35 | #define IPSTATE_MAX 2048 /* Maximum number of states held */ | |
36 | ||
37 | #define PAIRS(s1,d1,s2,d2) ((((s1) == (s2)) && ((d1) == (d2))) ||\ | |
38 | (((s1) == (d2)) && ((d1) == (s2)))) | |
39 | #define IPPAIR(s1,d1,s2,d2) PAIRS((s1).s_addr, (d1).s_addr, \ | |
40 | (s2).s_addr, (d2).s_addr) | |
41 | ||
42 | ||
43 | typedef struct udpstate { | |
44 | u_short us_sport; | |
45 | u_short us_dport; | |
46 | } udpstate_t; | |
47 | ||
48 | typedef struct icmpstate { | |
49 | u_short ics_id; | |
50 | u_short ics_seq; | |
51 | u_char ics_type; | |
52 | } icmpstate_t; | |
53 | ||
54 | typedef struct tcpstate { | |
55 | u_short ts_sport; | |
56 | u_short ts_dport; | |
57 | u_long ts_seq; | |
58 | u_long ts_ack; | |
59 | u_short ts_swin; | |
60 | u_short ts_dwin; | |
61 | u_char ts_state[2]; | |
62 | } tcpstate_t; | |
63 | ||
64 | typedef struct ipstate { | |
65 | struct ipstate *is_next; | |
66 | u_long is_age; | |
67 | u_int is_pass; | |
68 | U_QUAD_T is_pkts; | |
69 | U_QUAD_T is_bytes; | |
70 | void *is_ifpin; | |
71 | void *is_ifpout; | |
72 | struct in_addr is_src; | |
73 | struct in_addr is_dst; | |
74 | u_char is_p; | |
75 | u_char is_flags; | |
76 | u_32_t is_opt; | |
77 | u_32_t is_optmsk; | |
78 | u_short is_sec; | |
79 | u_short is_secmsk; | |
80 | u_short is_auth; | |
81 | u_short is_authmsk; | |
82 | union { | |
83 | icmpstate_t is_ics; | |
84 | tcpstate_t is_ts; | |
85 | udpstate_t is_us; | |
86 | } is_ps; | |
87 | } ipstate_t; | |
88 | ||
89 | #define is_icmp is_ps.is_ics | |
90 | #define is_tcp is_ps.is_ts | |
91 | #define is_udp is_ps.is_us | |
92 | #define is_seq is_tcp.ts_seq | |
93 | #define is_ack is_tcp.ts_ack | |
94 | #define is_dwin is_tcp.ts_dwin | |
95 | #define is_swin is_tcp.ts_swin | |
96 | #define is_sport is_tcp.ts_sport | |
97 | #define is_dport is_tcp.ts_dport | |
98 | #define is_state is_tcp.ts_state | |
99 | ||
100 | #define TH_OPENING (TH_SYN|TH_ACK) | |
101 | ||
102 | ||
103 | typedef struct ipslog { | |
104 | U_QUAD_T isl_pkts; | |
105 | U_QUAD_T isl_bytes; | |
106 | struct in_addr isl_src; | |
107 | struct in_addr isl_dst; | |
108 | u_char isl_p; | |
109 | u_char isl_flags; | |
110 | u_short isl_type; | |
111 | union { | |
112 | u_short isl_filler[2]; | |
113 | u_short isl_ports[2]; | |
114 | u_short isl_icmp; | |
115 | } isl_ps; | |
116 | } ipslog_t; | |
117 | ||
118 | #define isl_sport isl_ps.isl_ports[0] | |
119 | #define isl_dport isl_ps.isl_ports[1] | |
120 | #define isl_itype isl_ps.isl_icmp | |
121 | ||
122 | #define ISL_NEW 0 | |
123 | #define ISL_EXPIRE 0xffff | |
124 | #define ISL_FLUSH 0xfffe | |
125 | ||
126 | ||
127 | typedef struct ips_stat { | |
128 | u_long iss_hits; | |
129 | u_long iss_miss; | |
130 | u_long iss_max; | |
131 | u_long iss_tcp; | |
132 | u_long iss_udp; | |
133 | u_long iss_icmp; | |
134 | u_long iss_nomem; | |
135 | u_long iss_expire; | |
136 | u_long iss_fin; | |
137 | u_long iss_active; | |
138 | u_long iss_logged; | |
139 | u_long iss_logfail; | |
140 | ipstate_t **iss_table; | |
141 | } ips_stat_t; | |
142 | ||
143 | ||
144 | extern u_long fr_tcpidletimeout; | |
145 | extern u_long fr_tcpclosewait; | |
146 | extern u_long fr_tcplastack; | |
147 | extern u_long fr_tcptimeout; | |
148 | extern u_long fr_tcpclosed; | |
149 | extern u_long fr_udptimeout; | |
150 | extern u_long fr_icmptimeout; | |
151 | extern int fr_tcpstate __P((ipstate_t *, fr_info_t *, ip_t *, tcphdr_t *)); | |
152 | extern int fr_addstate __P((ip_t *, fr_info_t *, u_int)); | |
153 | extern int fr_checkstate __P((ip_t *, fr_info_t *)); | |
154 | extern void fr_timeoutstate __P((void)); | |
155 | extern void fr_tcp_age __P((u_long *, u_char *, ip_t *, fr_info_t *, int)); | |
156 | extern void fr_stateunload __P((void)); | |
157 | extern void ipstate_log __P((struct ipstate *, u_short)); | |
158 | #if defined(__NetBSD__) || defined(__OpenBSD__) | |
159 | extern int fr_state_ioctl __P((caddr_t, u_long, int)); | |
160 | #else | |
161 | extern int fr_state_ioctl __P((caddr_t, int, int)); | |
162 | #endif | |
163 | ||
164 | #endif /* __IP_STATE_H__ */ |