1 /* $NetBSD: ipsec_var.h,v 1.5 2008/04/23 06:09:05 thorpej Exp $ */ 2 /* $FreeBSD: src/sys/netipsec/ipsec.h,v 1.2.4.2 2004/02/14 22:23:23 bms Exp $ */ 3 4 /*- 5 * Copyright (c) 2002, 2003 Sam Leffler, Errno Consulting 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 * 29 * $FreeBSD: src/tools/tools/crypto/ipsecstats.c,v 1.1.4.1 2003/06/03 00:13:13 sam Exp $ 30 */ 31 32 #ifndef _NETIPSEC_IPSEC_VAR_H_ 33 #define _NETIPSEC_IPSEC_VAR_H_ 34 35 /* 36 * statistics for ipsec processing 37 * Each counter is an unsigned 64-bit value. 38 */ 39 #define IPSEC_STAT_IN_POLVIO 0 /* input: sec policy violation */ 40 #define IPSEC_STAT_OUT_POLVIO 1 /* output: sec policy violation */ 41 #define IPSEC_STAT_OUT_NOSA 2 /* output: SA unavailable */ 42 #define IPSEC_STAT_OUT_NOMEM 3 /* output: no memory available */ 43 #define IPSEC_STAT_OUT_NOROUTE 4 /* output: no route available */ 44 #define IPSEC_STAT_OUT_INVAL 5 /* output: generic error */ 45 #define IPSEC_STAT_OUT_BUNDLESA 6 /* output: bundled SA processed */ 46 #define IPSEC_STAT_MBCOALESCED 7 /* mbufs coalesced during clone */ 47 #define IPSEC_STAT_CLCOALESCED 8 /* clusters coalesced during clone */ 48 #define IPSEC_STAT_CLCOPIED 9 /* clusters copied during clone */ 49 #define IPSEC_STAT_MBINSERTED 10 /* mbufs inserted during makespace */ 50 #define IPSEC_STAT_SPDCACHELOOKUP 11 51 #define IPSEC_STAT_SPDCACHEMISS 12 52 #define IPSEC_STAT_INPUT_FRONT 13 53 #define IPSEC_STAT_INPUT_MIDDLE 14 54 #define IPSEC_STAT_INPUT_END 15 55 56 #define IPSEC_NSTATS 16 57 58 /* 59 * Definitions for IPsec & Key sysctl operations. 60 */ 61 /* 62 * Names for IPsec & Key sysctl objects 63 */ 64 #define IPSECCTL_STATS 1 /* KAME compat stats */ 65 #define IPSECCTL_DEF_POLICY 2 66 #define IPSECCTL_DEF_ESP_TRANSLEV 3 /* int; ESP transport mode */ 67 #define IPSECCTL_DEF_ESP_NETLEV 4 /* int; ESP tunnel mode */ 68 #define IPSECCTL_DEF_AH_TRANSLEV 5 /* int; AH transport mode */ 69 #define IPSECCTL_DEF_AH_NETLEV 6 /* int; AH tunnel mode */ 70 #if 0 /* obsolete, do not reuse */ 71 #define IPSECCTL_INBOUND_CALL_IKE 7 72 #endif 73 #define IPSECCTL_AH_CLEARTOS 8 74 #define IPSECCTL_AH_OFFSETMASK 9 75 #define IPSECCTL_DFBIT 10 76 #define IPSECCTL_ECN 11 77 #define IPSECCTL_DEBUG 12 78 #define IPSECCTL_ESP_RANDPAD 13 79 #define IPSECCTL_MAXID 14 80 81 #define IPSECCTL_NAMES { \ 82 { 0, 0 }, \ 83 { 0, 0 }, \ 84 { "def_policy", CTLTYPE_INT }, \ 85 { "esp_trans_deflev", CTLTYPE_INT }, \ 86 { "esp_net_deflev", CTLTYPE_INT }, \ 87 { "ah_trans_deflev", CTLTYPE_INT }, \ 88 { "ah_net_deflev", CTLTYPE_INT }, \ 89 { 0, 0 }, \ 90 { "ah_cleartos", CTLTYPE_INT }, \ 91 { "ah_offsetmask", CTLTYPE_INT }, \ 92 { "dfbit", CTLTYPE_INT }, \ 93 { "ecn", CTLTYPE_INT }, \ 94 { "debug", CTLTYPE_INT }, \ 95 { "esp_randpad", CTLTYPE_INT }, \ 96 } 97 98 #define IPSEC6CTL_NAMES { \ 99 { 0, 0 }, \ 100 { 0, 0 }, \ 101 { "def_policy", CTLTYPE_INT }, \ 102 { "esp_trans_deflev", CTLTYPE_INT }, \ 103 { "esp_net_deflev", CTLTYPE_INT }, \ 104 { "ah_trans_deflev", CTLTYPE_INT }, \ 105 { "ah_net_deflev", CTLTYPE_INT }, \ 106 { 0, 0 }, \ 107 { 0, 0 }, \ 108 { 0, 0 }, \ 109 { 0, 0 }, \ 110 { "ecn", CTLTYPE_INT }, \ 111 { "debug", CTLTYPE_INT }, \ 112 { "esp_randpad", CTLTYPE_INT }, \ 113 } 114 115 #endif /* !_NETIPSEC_IPSEC_VAR_H_ */ 116