aboutsummaryrefslogtreecommitdiff
path: root/sys/net/if_types.h
diff options
context:
space:
mode:
authorAndrew Thompson <thompsa@FreeBSD.org>2006-06-26 22:30:08 +0000
committerAndrew Thompson <thompsa@FreeBSD.org>2006-06-26 22:30:08 +0000
commitbdea400f3ba20dd0ffcaef20d68912f7041d9eeb (patch)
treead08e122ba3a5390ec867d258e80d618c4727731 /sys/net/if_types.h
parentd81175c738fc9af95fe03734068b50159524e89f (diff)
downloadsrc-bdea400f3ba20dd0ffcaef20d68912f7041d9eeb.tar.gz
src-bdea400f3ba20dd0ffcaef20d68912f7041d9eeb.zip
Add a pseudo interface for packet filtering IPSec connections before or after
encryption. There are two functions, a bpf tap which has a basic header with the SPI number which our current tcpdump knows how to display, and handoff to pfil(9) for packet filtering. Obtained from: OpenBSD Based on: kern/94829 No objections: arch, net MFC after: 1 month
Notes
Notes: svn path=/head/; revision=159965
Diffstat (limited to 'sys/net/if_types.h')
-rw-r--r--sys/net/if_types.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/net/if_types.h b/sys/net/if_types.h
index 2d25b69739a0..4c37c492cff8 100644
--- a/sys/net/if_types.h
+++ b/sys/net/if_types.h
@@ -246,6 +246,7 @@
#define IFT_GIF 0xf0
#define IFT_PVC 0xf1
#define IFT_FAITH 0xf2
+#define IFT_ENC 0xf4
#define IFT_PFLOG 0xf6
#define IFT_PFSYNC 0xf7
#define IFT_CARP 0xf8 /* Common Address Redundancy Protocol */