Lines Matching refs:scrub
2760 VERIFY(src->scrub == NULL); in pf_normalize_tcp_init()
2762 src->scrub = pool_get(&pf_state_scrub_pl, PR_NOWAIT); in pf_normalize_tcp_init()
2763 if (src->scrub == NULL) { in pf_normalize_tcp_init()
2766 bzero(src->scrub, sizeof(*src->scrub)); in pf_normalize_tcp_init()
2772 src->scrub->pfss_ttl = h->ip_ttl; in pf_normalize_tcp_init()
2778 src->scrub->pfss_ttl = h->ip6_hlim; in pf_normalize_tcp_init()
2793 if (th->th_off > (sizeof(struct tcphdr) >> 2) && src->scrub && in pf_normalize_tcp_init()
2807 src->scrub->pfss_flags |= in pf_normalize_tcp_init()
2809 src->scrub->pfss_ts_mod = in pf_normalize_tcp_init()
2817 src->scrub->pfss_tsval0 = ntohl(tsval); in pf_normalize_tcp_init()
2818 src->scrub->pfss_tsval = ntohl(tsval); in pf_normalize_tcp_init()
2819 src->scrub->pfss_tsecr = ntohl(tsecr); in pf_normalize_tcp_init()
2820 getmicrouptime(&src->scrub->pfss_last); in pf_normalize_tcp_init()
2837 if (state->src.scrub) { in pf_normalize_tcp_cleanup()
2838 pool_put(&pf_state_scrub_pl, state->src.scrub); in pf_normalize_tcp_cleanup()
2840 if (state->dst.scrub) { in pf_normalize_tcp_cleanup()
2841 pool_put(&pf_state_scrub_pl, state->dst.scrub); in pf_normalize_tcp_cleanup()
2860 VERIFY(src->scrub || dst->scrub); in pf_normalize_tcp_stateful()
2870 if (src->scrub) { in pf_normalize_tcp_stateful()
2872 if (h->ip_ttl > src->scrub->pfss_ttl) { in pf_normalize_tcp_stateful()
2873 src->scrub->pfss_ttl = h->ip_ttl; in pf_normalize_tcp_stateful()
2875 h->ip_ttl = src->scrub->pfss_ttl; in pf_normalize_tcp_stateful()
2881 if (src->scrub) { in pf_normalize_tcp_stateful()
2883 if (h->ip6_hlim > src->scrub->pfss_ttl) { in pf_normalize_tcp_stateful()
2884 src->scrub->pfss_ttl = h->ip6_hlim; in pf_normalize_tcp_stateful()
2886 h->ip6_hlim = src->scrub->pfss_ttl; in pf_normalize_tcp_stateful()
2893 ((src->scrub && (src->scrub->pfss_flags & PFSS_TIMESTAMP)) || in pf_normalize_tcp_stateful()
2894 (dst->scrub && (dst->scrub->pfss_flags & PFSS_TIMESTAMP))) && in pf_normalize_tcp_stateful()
2927 if (tsval && src->scrub && in pf_normalize_tcp_stateful()
2928 (src->scrub->pfss_flags & in pf_normalize_tcp_stateful()
2934 src->scrub->pfss_ts_mod), in pf_normalize_tcp_stateful()
2942 if (tsecr && dst->scrub && in pf_normalize_tcp_stateful()
2943 (dst->scrub->pfss_flags & in pf_normalize_tcp_stateful()
2946 - dst->scrub->pfss_ts_mod; in pf_normalize_tcp_stateful()
2987 if (src->scrub && (src->scrub->pfss_flags & PFSS_PAWS) && in pf_normalize_tcp_stateful()
2988 (uptime.tv_sec - src->scrub->pfss_last.tv_sec > TS_MAX_IDLE || in pf_normalize_tcp_stateful()
2995 src->scrub->pfss_flags = (src->scrub->pfss_flags & ~PFSS_PAWS) in pf_normalize_tcp_stateful()
2998 if (dst->scrub && (dst->scrub->pfss_flags & PFSS_PAWS) && in pf_normalize_tcp_stateful()
2999 uptime.tv_sec - dst->scrub->pfss_last.tv_sec > TS_MAX_IDLE) { in pf_normalize_tcp_stateful()
3005 dst->scrub->pfss_flags = (dst->scrub->pfss_flags & ~PFSS_PAWS) in pf_normalize_tcp_stateful()
3009 if (got_ts && src->scrub && dst->scrub && in pf_normalize_tcp_stateful()
3010 (src->scrub->pfss_flags & PFSS_PAWS) && in pf_normalize_tcp_stateful()
3011 (dst->scrub->pfss_flags & PFSS_PAWS)) { in pf_normalize_tcp_stateful()
3092 timersub(&uptime, &src->scrub->pfss_last, &delta_ts); in pf_normalize_tcp_stateful()
3099 (SEQ_LT(tsval, dst->scrub->pfss_tsecr) || in pf_normalize_tcp_stateful()
3100 SEQ_GT(tsval, src->scrub->pfss_tsval + tsval_from_last) || in pf_normalize_tcp_stateful()
3101 (tsecr && (SEQ_GT(tsecr, dst->scrub->pfss_tsval) || in pf_normalize_tcp_stateful()
3102 SEQ_LT(tsecr, dst->scrub->pfss_tsval0))))) { in pf_normalize_tcp_stateful()
3112 SEQ_LT(tsval, dst->scrub->pfss_tsecr) ? '0' : ' ', in pf_normalize_tcp_stateful()
3113 SEQ_GT(tsval, src->scrub->pfss_tsval + in pf_normalize_tcp_stateful()
3115 SEQ_GT(tsecr, dst->scrub->pfss_tsval) ? '2' : ' ', in pf_normalize_tcp_stateful()
3116 SEQ_LT(tsecr, dst->scrub->pfss_tsval0)? '3' : ' ')); in pf_normalize_tcp_stateful()
3122 src->scrub->pfss_tsval, src->scrub->pfss_tsecr)); in pf_normalize_tcp_stateful()
3124 dst->scrub->pfss_tsval, dst->scrub->pfss_tsecr, in pf_normalize_tcp_stateful()
3125 dst->scrub->pfss_tsval0)); in pf_normalize_tcp_stateful()
3139 src->scrub && dst->scrub && in pf_normalize_tcp_stateful()
3140 (src->scrub->pfss_flags & PFSS_PAWS) && in pf_normalize_tcp_stateful()
3141 (dst->scrub->pfss_flags & PFSS_PAWS)) { in pf_normalize_tcp_stateful()
3169 if (pd->p_len > 0 && (src->scrub->pfss_flags & PFSS_DATA_TS)) { in pf_normalize_tcp_stateful()
3195 if (pd->p_len > 0 && src->scrub && (src->scrub->pfss_flags & in pf_normalize_tcp_stateful()
3198 src->scrub->pfss_flags |= PFSS_DATA_TS; in pf_normalize_tcp_stateful()
3200 src->scrub->pfss_flags |= PFSS_DATA_NOTS; in pf_normalize_tcp_stateful()
3201 if (pf_status.debug >= PF_DEBUG_MISC && dst->scrub && in pf_normalize_tcp_stateful()
3202 (dst->scrub->pfss_flags & PFSS_TIMESTAMP)) { in pf_normalize_tcp_stateful()
3218 if (got_ts && src->scrub && PFSS_TIMESTAMP == (src->scrub->pfss_flags & in pf_normalize_tcp_stateful()
3220 getmicrouptime(&src->scrub->pfss_last); in pf_normalize_tcp_stateful()
3221 if (SEQ_GEQ(tsval, src->scrub->pfss_tsval) || in pf_normalize_tcp_stateful()
3222 (src->scrub->pfss_flags & PFSS_PAWS) == 0) { in pf_normalize_tcp_stateful()
3223 src->scrub->pfss_tsval = tsval; in pf_normalize_tcp_stateful()
3227 if (SEQ_GEQ(tsecr, src->scrub->pfss_tsecr) || in pf_normalize_tcp_stateful()
3228 (src->scrub->pfss_flags & PFSS_PAWS) == 0) { in pf_normalize_tcp_stateful()
3229 src->scrub->pfss_tsecr = tsecr; in pf_normalize_tcp_stateful()
3232 if ((src->scrub->pfss_flags & PFSS_PAWS) == 0 && in pf_normalize_tcp_stateful()
3233 (SEQ_LT(tsval, src->scrub->pfss_tsval0) || in pf_normalize_tcp_stateful()
3234 src->scrub->pfss_tsval0 == 0)) { in pf_normalize_tcp_stateful()
3236 src->scrub->pfss_tsval0 = tsval; in pf_normalize_tcp_stateful()
3240 if ((src->scrub->pfss_flags & PFSS_PAWS) == 0) { in pf_normalize_tcp_stateful()
3241 src->scrub->pfss_flags |= PFSS_PAWS; in pf_normalize_tcp_stateful()