pf/net/pf_norm.c

1702 	KASSERT((src->scrub == NULL),
1703 	    ("pf_normalize_tcp_init: src->scrub != NULL"));
1705 	src->scrub = pool_get(&V_pf_state_scrub_pl, PR_NOWAIT);
1707 	KASSERT(src->scrub == NULL);
1709 	src->scrub = pool_get(&pf_state_scrub_pl, PR_NOWAIT);
1711 	if (src->scrub == NULL)
1713 	bzero(src->scrub, sizeof(*src->scrub));
1719 		src->scrub->pfss_ttl = h->ip_ttl;
1726 		src->scrub->pfss_ttl = h->ip6_hlim;
1741 	if (th->th_off > (sizeof(struct tcphdr) >> 2) && src->scrub &&
1756 					src->scrub->pfss_flags |=
1758 					src->scrub->pfss_ts_mod =
1766 					src->scrub->pfss_tsval0 = ntohl(tsval);
1767 					src->scrub->pfss_tsval = ntohl(tsval);
1768 					src->scrub->pfss_tsecr = ntohl(tsecr);
1769 					getmicrouptime(&src->scrub->pfss_last);
1787 	if (state->src.scrub)
1788 		pool_put(&V_pf_state_scrub_pl, state->src.scrub);
1789 	if (state->dst.scrub)
1790 		pool_put(&V_pf_state_scrub_pl, state->dst.scrub);
1792 	if (state->src.scrub)
1793 		pool_put(&pf_state_scrub_pl, state->src.scrub);
1794 	if (state->dst.scrub)
1795 		pool_put(&pf_state_scrub_pl, state->dst.scrub);
1815 	KASSERT((src->scrub || dst->scrub),
1816 	    ("pf_normalize_tcp_statefull: src->scrub && dst->scrub!"));
1818 	KASSERT(src->scrub || dst->scrub);
1829 		if (src->scrub) {
1831 			if (h->ip_ttl > src->scrub->pfss_ttl)
1832 				src->scrub->pfss_ttl = h->ip_ttl;
1833 			h->ip_ttl = src->scrub->pfss_ttl;
1840 		if (src->scrub) {
1842 			if (h->ip6_hlim > src->scrub->pfss_ttl)
1843 				src->scrub->pfss_ttl = h->ip6_hlim;
1844 			h->ip6_hlim = src->scrub->pfss_ttl;
1852 	    ((src->scrub && (src->scrub->pfss_flags & PFSS_TIMESTAMP)) ||
1853 	    (dst->scrub && (dst->scrub->pfss_flags & PFSS_TIMESTAMP))) &&
1889 					if (tsval && src->scrub &&
1890 					    (src->scrub->pfss_flags &
1896 						    src->scrub->pfss_ts_mod),
1904 					if (tsecr && dst->scrub &&
1905 					    (dst->scrub->pfss_flags &
1908 						    - dst->scrub->pfss_ts_mod;
1944 	if (src->scrub && (src->scrub->pfss_flags & PFSS_PAWS) &&
1945 	    (uptime.tv_sec - src->scrub->pfss_last.tv_sec > TS_MAX_IDLE ||
1956 		src->scrub->pfss_flags = (src->scrub->pfss_flags & ~PFSS_PAWS)
1959 	if (dst->scrub && (dst->scrub->pfss_flags & PFSS_PAWS) &&
1960 	    uptime.tv_sec - dst->scrub->pfss_last.tv_sec > TS_MAX_IDLE) {
1970 		dst->scrub->pfss_flags = (dst->scrub->pfss_flags & ~PFSS_PAWS)
1974 	if (got_ts && src->scrub && dst->scrub &&
1975 	    (src->scrub->pfss_flags & PFSS_PAWS) &&
1976 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {
2072 		timersub(&uptime, &src->scrub->pfss_last, &delta_ts);
2079 		    (SEQ_LT(tsval, dst->scrub->pfss_tsecr) ||
2080 		    SEQ_GT(tsval, src->scrub->pfss_tsval + tsval_from_last) ||
2081 		    (tsecr && (SEQ_GT(tsecr, dst->scrub->pfss_tsval) ||
2082 		    SEQ_LT(tsecr, dst->scrub->pfss_tsval0))))) {
2091 			    SEQ_LT(tsval, dst->scrub->pfss_tsecr) ? '0' : ' ',
2092 			    SEQ_GT(tsval, src->scrub->pfss_tsval +
2094 			    SEQ_GT(tsecr, dst->scrub->pfss_tsval) ? '2' : ' ',
2095 			    SEQ_LT(tsecr, dst->scrub->pfss_tsval0)? '3' : ' '));
2103 			    src->scrub->pfss_tsval, src->scrub->pfss_tsecr));
2105 			    "\n", dst->scrub->pfss_tsval,
2106 			    dst->scrub->pfss_tsecr, dst->scrub->pfss_tsval0));
2113 			    src->scrub->pfss_tsval, src->scrub->pfss_tsecr));
2115 			    "\n", dst->scrub->pfss_tsval,
2116 			    dst->scrub->pfss_tsecr, dst->scrub->pfss_tsval0));
2136 	    src->scrub && dst->scrub &&
2137 	    (src->scrub->pfss_flags & PFSS_PAWS) &&
2138 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {
2165 		if (pd->p_len > 0 && (src->scrub->pfss_flags & PFSS_DATA_TS)) {
2195 	if (pd->p_len > 0 && src->scrub && (src->scrub->pfss_flags &
2198 			src->scrub->pfss_flags |= PFSS_DATA_TS;
2200 			src->scrub->pfss_flags |= PFSS_DATA_NOTS;
2202 			if (V_pf_status.debug >= PF_DEBUG_MISC && dst->scrub &&
2204 			if (pf_status.debug >= PF_DEBUG_MISC && dst->scrub &&
2206 			    (dst->scrub->pfss_flags & PFSS_TIMESTAMP)) {
2222 	if (got_ts && src->scrub && PFSS_TIMESTAMP == (src->scrub->pfss_flags &
2224 		getmicrouptime(&src->scrub->pfss_last);
2225 		if (SEQ_GEQ(tsval, src->scrub->pfss_tsval) ||
2226 		    (src->scrub->pfss_flags & PFSS_PAWS) == 0)
2227 			src->scrub->pfss_tsval = tsval;
2230 			if (SEQ_GEQ(tsecr, src->scrub->pfss_tsecr) ||
2231 			    (src->scrub->pfss_flags & PFSS_PAWS) == 0)
2232 				src->scrub->pfss_tsecr = tsecr;
2234 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0 &&
2235 			    (SEQ_LT(tsval, src->scrub->pfss_tsval0) ||
2236 			    src->scrub->pfss_tsval0 == 0)) {
2238 				src->scrub->pfss_tsval0 = tsval;
2242 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0)
2243 				src->scrub->pfss_flags |= PFSS_PAWS;