net/netfilter/nf_conntrack_proto_tcp.c

107  * we haven't seen.
116  * SYN_SENT:	SYN-only packet seen
117  * SYN_SENT2:	SYN-only packet seen from reply dir, simultaneous open
118  * SYN_RECV:	SYN-ACK packet seen
119  * ESTABLISHED:	ACK packet seen
120  * FIN_WAIT:	FIN packet seen
121  * CLOSE_WAIT:	ACK seen (after FIN)
122  * LAST_ACK:	FIN seen (after FIN)
123  * TIME_WAIT:	last ACK seen
177  *	sFW -> sLA	FIN seen in both directions, waiting for
189  *	sSS -> sIV	ACK is invalid: we haven't seen a SYN/ACK yet.
239  *	sFW -> sLA	FIN seen in both directions.
295 	td_maxend = max(sack + max(win,1)) seen in reply packets
296 	td_maxwin = max(max(win, 1)) + (sack - ack) seen in sent packets
299 	td_end    = max(seq + len) seen in sent packets
516 	struct ip_ct_tcp_state *sender = &state->seen[dir];
517 	struct ip_ct_tcp_state *receiver = &state->seen[!dir];
562 				/* We haven't seen traffic in the other
654 					  "ACK is over upper bound %u (ACKed data not seen yet)",
859 		ct->proto.tcp.seen[0].td_end =
862 		ct->proto.tcp.seen[0].td_maxwin = ntohs(th->window);
863 		if (ct->proto.tcp.seen[0].td_maxwin == 0)
864 			ct->proto.tcp.seen[0].td_maxwin = 1;
865 		ct->proto.tcp.seen[0].td_maxend =
866 			ct->proto.tcp.seen[0].td_end;
868 		tcp_options(skb, dataoff, th, &ct->proto.tcp.seen[0]);
879 		ct->proto.tcp.seen[0].td_end =
882 		ct->proto.tcp.seen[0].td_maxwin = ntohs(th->window);
883 		if (ct->proto.tcp.seen[0].td_maxwin == 0)
884 			ct->proto.tcp.seen[0].td_maxwin = 1;
885 		ct->proto.tcp.seen[0].td_maxend =
886 			ct->proto.tcp.seen[0].td_end +
887 			ct->proto.tcp.seen[0].td_maxwin;
891 		ct->proto.tcp.seen[0].flags =
892 		ct->proto.tcp.seen[1].flags = IP_CT_TCP_FLAG_SACK_PERM |
1011 		if (((ct->proto.tcp.seen[dir].flags
1012 		      | ct->proto.tcp.seen[!dir].flags)
1055 			ct->proto.tcp.seen[ct->proto.tcp.last_dir].td_end =
1057 			ct->proto.tcp.seen[ct->proto.tcp.last_dir].td_maxend =
1059 			ct->proto.tcp.seen[ct->proto.tcp.last_dir].td_maxwin =
1062 			ct->proto.tcp.seen[ct->proto.tcp.last_dir].td_scale =
1065 			ct->proto.tcp.seen[ct->proto.tcp.last_dir].flags =
1067 			nf_ct_tcp_state_reset(&ct->proto.tcp.seen[dir]);
1085 			struct ip_ct_tcp_state seen = {};
1089 			tcp_options(skb, dataoff, th, &seen);
1090 			if (seen.flags & IP_CT_TCP_FLAG_WINDOW_SCALE) {
1093 				ct->proto.tcp.last_wscale = seen.td_scale;
1095 			if (seen.flags & IP_CT_TCP_FLAG_SACK_PERM) {
1130 		    ct->proto.tcp.seen[dir].td_end - 1 == ntohl(th->seq)) {
1186 		if ((ct->proto.tcp.seen[!dir].flags & IP_CT_TCP_FLAG_MAXACK_SET) &&
1197 			if (before(seq, ct->proto.tcp.seen[!dir].td_maxack) &&
1206 			    seq == ct->proto.tcp.seen[!dir].td_maxack)
1274 		ct->proto.tcp.seen[dir].flags |= IP_CT_TCP_FLAG_CLOSE_INIT;
1285 	else if ((ct->proto.tcp.seen[0].flags | ct->proto.tcp.seen[1].flags) &
1362 		       ct->proto.tcp.seen[0].td_scale) ||
1364 		       ct->proto.tcp.seen[1].td_scale))
1367 	tmp.flags = ct->proto.tcp.seen[0].flags;
1372 	tmp.flags = ct->proto.tcp.seen[1].flags;
1428 		ct->proto.tcp.seen[0].flags &= ~attr->mask;
1429 		ct->proto.tcp.seen[0].flags |= attr->flags & attr->mask;
1435 		ct->proto.tcp.seen[1].flags &= ~attr->mask;
1436 		ct->proto.tcp.seen[1].flags |= attr->flags & attr->mask;
1441 	    ct->proto.tcp.seen[0].flags & IP_CT_TCP_FLAG_WINDOW_SCALE &&
1442 	    ct->proto.tcp.seen[1].flags & IP_CT_TCP_FLAG_WINDOW_SCALE) {
1443 		ct->proto.tcp.seen[0].td_scale =
1445 		ct->proto.tcp.seen[1].td_scale =