ipfilter/netinet/ip_sync.c

581 /* This function is called when a user program wants to read some data      */
582 /* for pending state/NAT updates.  If no data is available, the caller is   */
689 /* header.  As required, more data is fetched from the uio structure but    */
691 /* create a new state entry or update one.  Deletion is left to the state   */
702 	ipstate_t *is, sn;
715 		KMALLOC(is, ipstate_t *);
716 		if (is == NULL) {
726 			KFREE(is);
730 		bzero((char *)is, offsetof(ipstate_t, is_die));
731 		bcopy((char *)&sn.is_die, (char *)&is->is_die,
732 		      sizeof(*is) - offsetof(ipstate_t, is_die));
733 		ipf_sync_storder(0, is);
752 		is->is_rule = fr;
753 		is->is_sync = sl;
756 		sl->sl_ips = is;
768 		ipf_state_insert(softc, is, sp->sm_rev);
776 		/*fr_setstatequeue(is, sp->sm_rev);*/
810 		is = sl->sl_ips;
812 		MUTEX_ENTER(&is->is_lock);
817 			is->is_send = su.stu_data[0].td_end;
818 			is->is_maxsend = su.stu_data[0].td_maxend;
819 			is->is_maxswin = su.stu_data[0].td_maxwin;
820 			is->is_state[0] = su.stu_state[0];
821 			is->is_dend = su.stu_data[1].td_end;
822 			is->is_maxdend = su.stu_data[1].td_maxend;
823 			is->is_maxdwin = su.stu_data[1].td_maxwin;
824 			is->is_state[1] = su.stu_state[1];
833 		ipf_state_setqueue(softc, is, sp->sm_rev);
835 		MUTEX_EXIT(&is->is_lock);
926 /* header.  As required, more data is fetched from the uio structure but    */
928 /* create a new NAT entry or update one.  Deletion is left to the NAT       */
1054 	 * Get a unique number for this synclist_t.  The number is only meant
1069 	 * nth connection they make, where n is a value in the interval
1251 /* Walk through a table of sync entries and free each one.  It is assumed   */
1252 /* that some lock is held so that nobody else tries to access the table     */
1381 /* there is data waiting to be read from the /dev/ipsync device.            */
1398 /* This function lets the poll handler know that it is always ready willing */
1400 /* XXX Maybe this should return false if the sync table is full?            */
1420 /* - do not keep a program waiting too long: ipf_sync_wake_interval is the  */
1423 /*   get too full (ipf_sync_queue_high_wm is the high water mark);          */
1425 /*   other host(s) need an update (ipf_sync_event_high_wm is the high water */
1483 /* This is the function called even ipf_tick.  It implements one of the     */