Lines Matching defs:pkt
930 dyn_update_tcp_state(struct dyn_data *data, const struct ipfw_flow_id *pkt,
939 th_flags = pkt->_flags & (TH_FIN | TH_SYN | TH_RST);
1005 dyn_update_proto_state(struct dyn_data *data, const struct ipfw_flow_id *pkt,
1011 switch (pkt->proto) {
1017 expire = dyn_update_tcp_state(data, pkt, ulp, dir);
1040 dyn_lookup_ipv4_state(const struct ipfw_flow_id *pkt, const void *ulp,
1054 if (s->proto != pkt->proto)
1058 if (s->sport == pkt->src_port && s->dport == pkt->dst_port &&
1059 s->src == pkt->src_ip && s->dst == pkt->dst_ip) {
1063 if (s->sport == pkt->dst_port && s->dport == pkt->src_port &&
1064 s->src == pkt->dst_ip && s->dst == pkt->src_ip) {
1071 dyn_update_proto_state(s->data, pkt, ulp, pktlen,
1081 dyn_lookup_ipv4_state_locked(const struct ipfw_flow_id *pkt,
1090 if (s->proto != pkt->proto ||
1093 if (s->sport == pkt->src_port &&
1094 s->dport == pkt->dst_port &&
1095 s->src == pkt->src_ip && s->dst == pkt->dst_ip) {
1099 if (s->sport == pkt->dst_port && s->dport == pkt->src_port &&
1100 s->src == pkt->dst_ip && s->dst == pkt->src_ip) {
1106 dyn_update_proto_state(s->data, pkt, ulp, pktlen, dir);
1111 dyn_lookup_ipv4_parent(const struct ipfw_flow_id *pkt, const void *rule,
1132 s->proto == pkt->proto &&
1133 s->sport == pkt->src_port &&
1134 s->dport == pkt->dst_port &&
1135 s->src == pkt->src_ip && s->dst == pkt->dst_ip) {
1147 dyn_lookup_ipv4_parent_locked(const struct ipfw_flow_id *pkt,
1157 s->proto == pkt->proto &&
1158 s->sport == pkt->src_port &&
1159 s->dport == pkt->dst_port &&
1160 s->src == pkt->src_ip && s->dst == pkt->dst_ip)
1191 dyn_lookup_ipv6_state(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1205 if (s->proto != pkt->proto || s->zoneid != zoneid)
1209 if (s->sport == pkt->src_port && s->dport == pkt->dst_port &&
1210 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->src_ip6) &&
1211 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->dst_ip6)) {
1215 if (s->sport == pkt->dst_port && s->dport == pkt->src_port &&
1216 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->dst_ip6) &&
1217 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->src_ip6)) {
1223 dyn_update_proto_state(s->data, pkt, ulp, pktlen,
1233 dyn_lookup_ipv6_state_locked(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1242 if (s->proto != pkt->proto || s->kidx != kidx ||
1245 if (s->sport == pkt->src_port && s->dport == pkt->dst_port &&
1246 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->src_ip6) &&
1247 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->dst_ip6)) {
1251 if (s->sport == pkt->dst_port && s->dport == pkt->src_port &&
1252 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->dst_ip6) &&
1253 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->src_ip6)) {
1259 dyn_update_proto_state(s->data, pkt, ulp, pktlen, dir);
1264 dyn_lookup_ipv6_parent(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1285 s->proto == pkt->proto &&
1286 s->sport == pkt->src_port &&
1287 s->dport == pkt->dst_port && s->zoneid == zoneid &&
1288 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->src_ip6) &&
1289 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->dst_ip6)) {
1301 dyn_lookup_ipv6_parent_locked(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1311 s->proto == pkt->proto &&
1312 s->sport == pkt->src_port &&
1313 s->dport == pkt->dst_port && s->zoneid == zoneid &&
1314 IN6_ARE_ADDR_EQUAL(&s->src, &pkt->src_ip6) &&
1315 IN6_ARE_ADDR_EQUAL(&s->dst, &pkt->dst_ip6))
1325 * pkt - filled by ipfw_chk() ipfw_flow_id;
1486 const struct ipfw_flow_id *pkt, const void *ulp, int pktlen,
1508 dyn_update_proto_state(data, pkt, ulp, pktlen, MATCH_FORWARD);
1513 dyn_alloc_ipv4_state(const struct ipfw_flow_id *pkt, uint16_t kidx,
1524 s->proto = pkt->proto;
1525 s->sport = pkt->src_port;
1526 s->dport = pkt->dst_port;
1527 s->src = pkt->src_ip;
1528 s->dst = pkt->dst_ip;
1541 const struct ipfw_flow_id *pkt, uint32_t hashval, uint32_t version,
1555 s = dyn_lookup_ipv4_parent_locked(pkt, rule, ruleid,
1575 s = dyn_alloc_ipv4_state(pkt, kidx, O_LIMIT_PARENT);
1594 const struct ipfw_flow_id *pkt, const void *ulp, int pktlen,
1612 if (dyn_lookup_ipv4_state_locked(pkt, ulp, pktlen,
1619 data = dyn_alloc_dyndata(parent, ruleid, rulenum, pkt, ulp,
1626 s = dyn_alloc_ipv4_state(pkt, kidx, type);
1643 dyn_alloc_ipv6_state(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1655 s->proto = pkt->proto;
1656 s->sport = pkt->src_port;
1657 s->dport = pkt->dst_port;
1658 s->src = pkt->src_ip6;
1659 s->dst = pkt->dst_ip6;
1672 const struct ipfw_flow_id *pkt, uint32_t zoneid, uint32_t hashval,
1686 s = dyn_lookup_ipv6_parent_locked(pkt, zoneid, rule, ruleid,
1706 s = dyn_alloc_ipv6_state(pkt, zoneid, kidx, O_LIMIT_PARENT);
1725 const struct ipfw_flow_id *pkt, uint32_t zoneid, const void *ulp,
1743 if (dyn_lookup_ipv6_state_locked(pkt, zoneid, ulp, pktlen,
1750 data = dyn_alloc_dyndata(parent, ruleid, rulenum, pkt, ulp,
1757 s = dyn_alloc_ipv6_state(pkt, zoneid, kidx, type);
1774 dyn_get_parent_state(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1786 if (IS_IP4_FLOW_ID(pkt)) {
1790 s = dyn_lookup_ipv4_parent(pkt, rule, rule->id,
1800 rule->rulenum, pkt, hashval, version, kidx);
1809 else if (IS_IP6_FLOW_ID(pkt)) {
1813 s = dyn_lookup_ipv6_parent(pkt, zoneid, rule, rule->id,
1823 rule->rulenum, pkt, zoneid, hashval, version,
1845 print_dyn_rule_flags(pkt, O_LIMIT,
1866 dyn_install_state(const struct ipfw_flow_id *pkt, uint32_t zoneid,
1881 id.addr_type = pkt->addr_type;
1882 id.proto = pkt->proto;
1885 pkt->src_port: 0;
1887 pkt->dst_port: 0;
1888 if (IS_IP4_FLOW_ID(pkt)) {
1890 pkt->src_ip: 0;
1892 pkt->dst_ip: 0;
1895 else if (IS_IP6_FLOW_ID(pkt)) {
1897 id.src_ip6 = pkt->src_ip6;
1901 id.dst_ip6 = pkt->dst_ip6;
1918 print_dyn_rule_flags(pkt, O_LIMIT,
1931 hashval = hash_packet(pkt);
1932 if (IS_IP4_FLOW_ID(pkt))
1933 ret = dyn_add_ipv4_state(rule, ruleid, rulenum, pkt,
1936 else if (IS_IP6_FLOW_ID(pkt))
1937 ret = dyn_add_ipv6_state(rule, ruleid, rulenum, pkt,