bsd/net/pf_norm.c

2241 	VERIFY(src->scrub == NULL);
2243 	src->scrub = pool_get(&pf_state_scrub_pl, PR_NOWAIT);
2244 	if (src->scrub == NULL)
2246 	bzero(src->scrub, sizeof (*src->scrub));
2252 		src->scrub->pfss_ttl = h->ip_ttl;
2259 		src->scrub->pfss_ttl = h->ip6_hlim;
2274 	if (th->th_off > (sizeof (struct tcphdr) >> 2) && src->scrub &&
2289 					src->scrub->pfss_flags |=
2291 					src->scrub->pfss_ts_mod =
2299 					src->scrub->pfss_tsval0 = ntohl(tsval);
2300 					src->scrub->pfss_tsval = ntohl(tsval);
2301 					src->scrub->pfss_tsecr = ntohl(tsecr);
2302 					getmicrouptime(&src->scrub->pfss_last);
2319 	if (state->src.scrub)
2320 		pool_put(&pf_state_scrub_pl, state->src.scrub);
2321 	if (state->dst.scrub)
2322 		pool_put(&pf_state_scrub_pl, state->dst.scrub);
2340 	VERIFY(src->scrub || dst->scrub);
2350 		if (src->scrub) {
2352 			if (h->ip_ttl > src->scrub->pfss_ttl)
2353 				src->scrub->pfss_ttl = h->ip_ttl;
2354 			h->ip_ttl = src->scrub->pfss_ttl;
2361 		if (src->scrub) {
2363 			if (h->ip6_hlim > src->scrub->pfss_ttl)
2364 				src->scrub->pfss_ttl = h->ip6_hlim;
2365 			h->ip6_hlim = src->scrub->pfss_ttl;
2373 	    ((src->scrub && (src->scrub->pfss_flags & PFSS_TIMESTAMP)) ||
2374 	    (dst->scrub && (dst->scrub->pfss_flags & PFSS_TIMESTAMP))) &&
2407 					if (tsval && src->scrub &&
2408 					    (src->scrub->pfss_flags &
2414 						    src->scrub->pfss_ts_mod),
2422 					if (tsecr && dst->scrub &&
2423 					    (dst->scrub->pfss_flags &
2426 						    - dst->scrub->pfss_ts_mod;
2467 	if (src->scrub && (src->scrub->pfss_flags & PFSS_PAWS) &&
2468 	    (uptime.tv_sec - src->scrub->pfss_last.tv_sec > TS_MAX_IDLE ||
2475 		src->scrub->pfss_flags = (src->scrub->pfss_flags & ~PFSS_PAWS)
2478 	if (dst->scrub && (dst->scrub->pfss_flags & PFSS_PAWS) &&
2479 	    uptime.tv_sec - dst->scrub->pfss_last.tv_sec > TS_MAX_IDLE) {
2485 		dst->scrub->pfss_flags = (dst->scrub->pfss_flags & ~PFSS_PAWS)
2489 	if (got_ts && src->scrub && dst->scrub &&
2490 	    (src->scrub->pfss_flags & PFSS_PAWS) &&
2491 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {
2571 		timersub(&uptime, &src->scrub->pfss_last, &delta_ts);
2578 		    (SEQ_LT(tsval, dst->scrub->pfss_tsecr) ||
2579 		    SEQ_GT(tsval, src->scrub->pfss_tsval + tsval_from_last) ||
2580 		    (tsecr && (SEQ_GT(tsecr, dst->scrub->pfss_tsval) ||
2581 		    SEQ_LT(tsecr, dst->scrub->pfss_tsval0))))) {
2591 			    SEQ_LT(tsval, dst->scrub->pfss_tsecr) ? '0' : ' ',
2592 			    SEQ_GT(tsval, src->scrub->pfss_tsval +
2594 			    SEQ_GT(tsecr, dst->scrub->pfss_tsval) ? '2' : ' ',
2595 			    SEQ_LT(tsecr, dst->scrub->pfss_tsval0)? '3' : ' '));
2601 			    src->scrub->pfss_tsval, src->scrub->pfss_tsecr));
2603 			    dst->scrub->pfss_tsval, dst->scrub->pfss_tsecr,
2604 			    dst->scrub->pfss_tsval0));
2619 	    src->scrub && dst->scrub &&
2620 	    (src->scrub->pfss_flags & PFSS_PAWS) &&
2621 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {
2649 		if (pd->p_len > 0 && (src->scrub->pfss_flags & PFSS_DATA_TS)) {
2675 	if (pd->p_len > 0 && src->scrub && (src->scrub->pfss_flags &
2678 			src->scrub->pfss_flags |= PFSS_DATA_TS;
2680 			src->scrub->pfss_flags |= PFSS_DATA_NOTS;
2681 			if (pf_status.debug >= PF_DEBUG_MISC && dst->scrub &&
2682 			    (dst->scrub->pfss_flags & PFSS_TIMESTAMP)) {
2698 	if (got_ts && src->scrub && PFSS_TIMESTAMP == (src->scrub->pfss_flags &
2700 		getmicrouptime(&src->scrub->pfss_last);
2701 		if (SEQ_GEQ(tsval, src->scrub->pfss_tsval) ||
2702 		    (src->scrub->pfss_flags & PFSS_PAWS) == 0)
2703 			src->scrub->pfss_tsval = tsval;
2706 			if (SEQ_GEQ(tsecr, src->scrub->pfss_tsecr) ||
2707 			    (src->scrub->pfss_flags & PFSS_PAWS) == 0)
2708 				src->scrub->pfss_tsecr = tsecr;
2710 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0 &&
2711 			    (SEQ_LT(tsval, src->scrub->pfss_tsval0) ||
2712 			    src->scrub->pfss_tsval0 == 0)) {
2714 				src->scrub->pfss_tsval0 = tsval;
2718 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0)
2719 				src->scrub->pfss_flags |= PFSS_PAWS;