| | 1 | /* |
| | 2 | * Copyright (c) 2000 Apple Computer, Inc. All rights reserved. |
| | 3 | * |
| | 4 | * @APPLE_LICENSE_HEADER_START@ |
| | 5 | * |
| | 6 | * The contents of this file constitute Original Code as defined in and |
| | 7 | * are subject to the Apple Public Source License Version 1.1 (the |
| | 8 | * "License"). You may not use this file except in compliance with the |
| | 9 | * License. Please obtain a copy of the License at |
| | 10 | * http://www.apple.com/publicsource and read it before using this file. |
| | 11 | * |
| | 12 | * This Original Code and all software distributed under the License are |
| | 13 | * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER |
| | 14 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, |
| | 15 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, |
| | 16 | * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the |
| | 17 | * License for the specific language governing rights and limitations |
| | 18 | * under the License. |
| | 19 | * |
| | 20 | * @APPLE_LICENSE_HEADER_END@ |
| | 21 | */ |
| | 22 | /* |
| | 23 | * Copyright (C) 1995-1997 by Darren Reed. |
| | 24 | * |
| | 25 | * Redistribution and use in source and binary forms are permitted |
| | 26 | * provided that this notice is preserved and due credit is given |
| | 27 | * to the original author and the contributors. |
| | 28 | * |
| | 29 | * @(#)ip_state.h 1.3 1/12/96 (C) 1995 Darren Reed |
| | 30 | */ |
| | 31 | #ifndef __IP_STATE_H__ |
| | 32 | #define __IP_STATE_H__ |
| | 33 | |
| | 34 | #define IPSTATE_SIZE 257 |
| | 35 | #define IPSTATE_MAX 2048 /* Maximum number of states held */ |
| | 36 | |
| | 37 | #define PAIRS(s1,d1,s2,d2) ((((s1) == (s2)) && ((d1) == (d2))) ||\ |
| | 38 | (((s1) == (d2)) && ((d1) == (s2)))) |
| | 39 | #define IPPAIR(s1,d1,s2,d2) PAIRS((s1).s_addr, (d1).s_addr, \ |
| | 40 | (s2).s_addr, (d2).s_addr) |
| | 41 | |
| | 42 | |
| | 43 | typedef struct udpstate { |
| | 44 | u_short us_sport; |
| | 45 | u_short us_dport; |
| | 46 | } udpstate_t; |
| | 47 | |
| | 48 | typedef struct icmpstate { |
| | 49 | u_short ics_id; |
| | 50 | u_short ics_seq; |
| | 51 | u_char ics_type; |
| | 52 | } icmpstate_t; |
| | 53 | |
| | 54 | typedef struct tcpstate { |
| | 55 | u_short ts_sport; |
| | 56 | u_short ts_dport; |
| | 57 | u_long ts_seq; |
| | 58 | u_long ts_ack; |
| | 59 | u_short ts_swin; |
| | 60 | u_short ts_dwin; |
| | 61 | u_char ts_state[2]; |
| | 62 | } tcpstate_t; |
| | 63 | |
| | 64 | typedef struct ipstate { |
| | 65 | struct ipstate *is_next; |
| | 66 | u_long is_age; |
| | 67 | u_int is_pass; |
| | 68 | U_QUAD_T is_pkts; |
| | 69 | U_QUAD_T is_bytes; |
| | 70 | void *is_ifpin; |
| | 71 | void *is_ifpout; |
| | 72 | struct in_addr is_src; |
| | 73 | struct in_addr is_dst; |
| | 74 | u_char is_p; |
| | 75 | u_char is_flags; |
| | 76 | u_32_t is_opt; |
| | 77 | u_32_t is_optmsk; |
| | 78 | u_short is_sec; |
| | 79 | u_short is_secmsk; |
| | 80 | u_short is_auth; |
| | 81 | u_short is_authmsk; |
| | 82 | union { |
| | 83 | icmpstate_t is_ics; |
| | 84 | tcpstate_t is_ts; |
| | 85 | udpstate_t is_us; |
| | 86 | } is_ps; |
| | 87 | } ipstate_t; |
| | 88 | |
| | 89 | #define is_icmp is_ps.is_ics |
| | 90 | #define is_tcp is_ps.is_ts |
| | 91 | #define is_udp is_ps.is_us |
| | 92 | #define is_seq is_tcp.ts_seq |
| | 93 | #define is_ack is_tcp.ts_ack |
| | 94 | #define is_dwin is_tcp.ts_dwin |
| | 95 | #define is_swin is_tcp.ts_swin |
| | 96 | #define is_sport is_tcp.ts_sport |
| | 97 | #define is_dport is_tcp.ts_dport |
| | 98 | #define is_state is_tcp.ts_state |
| | 99 | |
| | 100 | #define TH_OPENING (TH_SYN|TH_ACK) |
| | 101 | |
| | 102 | |
| | 103 | typedef struct ipslog { |
| | 104 | U_QUAD_T isl_pkts; |
| | 105 | U_QUAD_T isl_bytes; |
| | 106 | struct in_addr isl_src; |
| | 107 | struct in_addr isl_dst; |
| | 108 | u_char isl_p; |
| | 109 | u_char isl_flags; |
| | 110 | u_short isl_type; |
| | 111 | union { |
| | 112 | u_short isl_filler[2]; |
| | 113 | u_short isl_ports[2]; |
| | 114 | u_short isl_icmp; |
| | 115 | } isl_ps; |
| | 116 | } ipslog_t; |
| | 117 | |
| | 118 | #define isl_sport isl_ps.isl_ports[0] |
| | 119 | #define isl_dport isl_ps.isl_ports[1] |
| | 120 | #define isl_itype isl_ps.isl_icmp |
| | 121 | |
| | 122 | #define ISL_NEW 0 |
| | 123 | #define ISL_EXPIRE 0xffff |
| | 124 | #define ISL_FLUSH 0xfffe |
| | 125 | |
| | 126 | |
| | 127 | typedef struct ips_stat { |
| | 128 | u_long iss_hits; |
| | 129 | u_long iss_miss; |
| | 130 | u_long iss_max; |
| | 131 | u_long iss_tcp; |
| | 132 | u_long iss_udp; |
| | 133 | u_long iss_icmp; |
| | 134 | u_long iss_nomem; |
| | 135 | u_long iss_expire; |
| | 136 | u_long iss_fin; |
| | 137 | u_long iss_active; |
| | 138 | u_long iss_logged; |
| | 139 | u_long iss_logfail; |
| | 140 | ipstate_t **iss_table; |
| | 141 | } ips_stat_t; |
| | 142 | |
| | 143 | |
| | 144 | extern u_long fr_tcpidletimeout; |
| | 145 | extern u_long fr_tcpclosewait; |
| | 146 | extern u_long fr_tcplastack; |
| | 147 | extern u_long fr_tcptimeout; |
| | 148 | extern u_long fr_tcpclosed; |
| | 149 | extern u_long fr_udptimeout; |
| | 150 | extern u_long fr_icmptimeout; |
| | 151 | extern int fr_tcpstate __P((ipstate_t *, fr_info_t *, ip_t *, tcphdr_t *)); |
| | 152 | extern int fr_addstate __P((ip_t *, fr_info_t *, u_int)); |
| | 153 | extern int fr_checkstate __P((ip_t *, fr_info_t *)); |
| | 154 | extern void fr_timeoutstate __P((void)); |
| | 155 | extern void fr_tcp_age __P((u_long *, u_char *, ip_t *, fr_info_t *, int)); |
| | 156 | extern void fr_stateunload __P((void)); |
| | 157 | extern void ipstate_log __P((struct ipstate *, u_short)); |
| | 158 | #if defined(__NetBSD__) || defined(__OpenBSD__) |
| | 159 | extern int fr_state_ioctl __P((caddr_t, u_long, int)); |
| | 160 | #else |
| | 161 | extern int fr_state_ioctl __P((caddr_t, int, int)); |
| | 162 | #endif |
| | 163 | |
| | 164 | #endif /* __IP_STATE_H__ */ |
projects / apple / xnu.git / blame_incremental