search for: xfrm

While compiling the new release i´ll get this error: gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -g -I../include -DRESOLVE_HOSTNAMES -c -o ipxfrm.o ipxfrm.c ipxfrm.c: In function `xfrm_selector_print'': ipxfrm.c:395: error: `IPPROTO_SCTP'' undeclared (first use in this function) ipxfrm.c:395: error: (Each undeclared identifier is reported only once ipxfrm.c:395: error: for each function it appears in.) ipxfrm.c: In function `...

...and making a custom kernel provided on the wiki. The rpmbuild fails with the following messages: Get an error on this step (figured out my other problem): Patch #40000 (centos-5.2-hipmod-sleep-beet-and-interfamily-all-in-one.patch): 1 out of 4 hunks FAILED -- saving rejects to file net/ipv4/xfrm4_output.c.rej 2 out of 3 hunks FAILED -- saving rejects to file net/ipv4/esp4.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/udp.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/tcp_ipv6.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/esp6.c.rej 2 out...

...es for tc help commands jamal: Multicast computation off by one Update generic netlink header Add controller support for new features exposed clarify "ok" and "pass" Fix missing class/flowid oddity Mention need for db dev package update xfrm async events make muticast group to bitmask conversion generic update xfrm monitoring to use nl_mgrp Masahide NAKAMURA: ADDR: Fix print format for lifetimes. ADDR: Enable to add IPv6 address with valid/preferred lifetime. ADDR: Define 0xFFFFFFFFU as INFINITY_LIFE_TIME...

Hi I have the latest iproute2 and am trying to get the following command working $ ip xfrm state add src dead::4 dst dead::2 proto esp spi 0x201 enc 3des-cbc 0x<48_bit_key> auth hmac-md5 0x<32_bit key> mode tunnel gives the following error RTNETLINK answers: Function not implemented. Any pointers to it.. Please help me out..Am i doing the right way to add to SAD ? -- abhin...

...* Removed () brackets around msg to fix compilation error. v1: https://lore.kernel.org/all/d4843760219f20367c27472f084bd8aa729cf321.1674995155.git.leon at kernel.org * Added special *_WEAK() macro instead of embedding same check in NL_SET_ERR_MSG_MOD/NL_SET_ERR_MSG_FMT. * Reuse same macro for XFRM code which triggered this patch. v0: https://lore.kernel.org/all/2919eb55e2e9b92265a3ba600afc8137a901ae5f.1674760340.git.leon at kernel.org --- include/linux/netlink.h | 10 ++++++++++ net/bridge/br_switchdev.c | 10 ++++------ net/dsa/master.c | 4 +--- net/dsa/slave.c | 4...

...ize); > > if (!t->sysctl_header) > > goto free; > > diff --git a/net/core/sysctl_net_core.c b/net/core/sysctl_net_core.c > > index 782273bb93c2..03f1edb948d7 100644 ... > > { > > struct ctl_table *table; > > + size_t table_size = ARRAY_SIZE(xfrm_table); > > __xfrm_sysctl_init(net); > > @@ -56,10 +57,13 @@ int __net_init xfrm_sysctl_init(struct net *net) > > table[3].data = &net->xfrm.sysctl_acq_expires; > > /* Don't export sysctls to unprivileged users */ > > - if (net->user_ns != &i...

Hello everybody. I would like to do some kind of shaping inside an ipsec tunnel implemented by Openswan and linux 2.6.18.x with xfrm (no KLIPS): for example, to limit outbound smtp traffic inside the tunnel. Question: where should I attach the qdisc to? Eth0? I''m asking this, because tcpdump only see the ESP packet on the eth0 and not the ''clear'' packet. TIA This is my simple network schema:...

Hello I have a huge data frame with three columns 'Roof' 'Month' and 'Temp' i want to run analyses on the numerical Temp data by the factors Roof and Month, separately and together. For using more than one factor i understand i should use aggregate, but i am struggling with the tapply for single factor analysis. > tapply(Temp, INDEX = Roof, FUN = median) This works

...n having issues with automount being slow with this new kernel and i tracked it down to dns delays which were being caused by ipsec not working. i have spent a few hours poking around and ipsec seems quite broken with this new kernel. esp packets go in and out just fine, but when i look at ip xfrm stats on the machine with the new kernel, i see that for input packets, the ah layer is being processed just fine, but the esp layer is showing 0 bytes/packets and no errors. i can't find any errors or other indications of what is going on. is anyone else running a standard ipsec tunnel (u...

...Fix ''ip link'' map to handle case where device gets autoloaded by using if_nametoindex as fallback * Device indices are unsigned not int. Masahide NAKAMURA * [ip] show timestamp when using ''-t'' option. * [ip] remove duplicated code for expired message of xfrm. * [ip] add "deleteall" command for xfrm; "flush" uses kernel''s flush interface and "deleteall" uses legacy iproute2''s flush feature like getting-and-deleting-for-each. This is the first export from the CVS repo, so let me know if there ar...

This version supports: * changes ''tc'' for latest netem queuing discipline * additions to ''ip'' to support xfrm * more robust configuration (works with older 2.4 systems) to detect xfrm, hfsc, htb, etc. The versioning scheme is to label the highest version of kernel used. It should build and run on older systems as well, but obviously can''t support stuff your kernel doesn''t have. So if...

...is broken. - skb_checksum_setup() assumes that a checksum will definitely be calculated in dev_queue_xmit(), but the destination device is netback, which is advertising NETIF_F_IP_CSUM ---> no checksum. So, added reset_proto_csum_blank() to skbuff.h, and call it in dev_queue_xmit() and xfrm4_output() AFTER the checksum is calculated. - The CHECKSUM_HW/proto_csum_blank vars are getting lost/stomped in various places. Tested on -unstable changeset 9925: - The network xm-tests on -bridge and -route - A domU firewalling between two bridges (similar to the error report, but without...

For a paper dealing with generalized ellipsoids, I want to illustrate in 3D an ellipsoid that is unbounded in one dimension, having the shape of an infinite cylinder along, say, z, but whose cross-section in (x,y) is an ellipse, say, given by the 2x2 matrix cov(x,y). I've looked at rgl:::cylinder3d, but don't see any way to make it accomplish this. Does anyone have any ideas? thx,

...Kernel source to figure out why the BEET patch is not working, I notice that there are two similar directories under ~/rpmbuild/BUILD/kernel-2.6.18: linux-2.16.18.i386 and linux-2.16.18.i686 So which one am I suppose to be patching? Currently, the patch starts out with: diff -urN a/net/ipv4/xfrm4_input.c b/net/ipv4/xfrm4_input.c I followed the kernel source setup instructions on the wiki: http://wiki.centos.org/HowTos/I_need_the_Kernel_Source tells me to supply i686 for getting and setting up the source. But http://wiki.centos.org/HowTos/Custom_Kernel has me setting up a .config file...

...es/linux-2.6.16-rc2/net-csum.patch >--- a/patches/linux-2.6.16-rc2/net-csum.patch Fri Feb 3 18:45:14 2006 >+++ b/patches/linux-2.6.16-rc2/net-csum.patch Mon Feb 6 19:34:52 2006 >@@ -44,3 +44,27 @@ > *portptr = newport; > return 1; > } >+--- linux-2.6.16-rc2-xen0/net/ipv4/xfrm4_output.c.orig 2006-02-03 22:36:32.000000000 -0600 >++++ linux-2.6.16-rc2-xen0/net/ipv4/xfrm4_output.c 2006-02-03 22:41:39.000000000 -0600 >+@@ -17,6 +17,8 @@ >+ #include <net/xfrm.h> >+ #include <net/icmp.h> >+ >++extern int xen_checksum_setup(struct sk_buff *skb); &...

...ore/sysctl_net_core.c | 3 +- net/ieee802154/6lowpan/reassembly.c | 8 ++- net/ipv4/devinet.c | 3 +- net/ipv4/ip_fragment.c | 3 +- net/ipv4/route.c | 8 ++- net/ipv4/sysctl_net_ipv4.c | 3 +- net/ipv4/xfrm4_policy.c | 3 +- net/ipv6/addrconf.c | 3 +- net/ipv6/icmp.c | 5 ++ net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/reassembly.c | 3 +- net/ipv6/route.c | 9 ++++ net/ipv6/sysctl_n...

...e driver as ''tty1'' Event-channel device installed. netfront: Initialising virtual ethernet driver. i8042.c: No controller found. xen-vbd: registered block device major 202 blkfront: xvda1: barriers enabled mice: PS/2 mouse device common for all mice TCP bic registered Initializing XFRM netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 blkfront: xvda2: barriers enabled netfront: device eth0 has copying receive path. blkfront: xvda3: barriers enabled XENBUS: Device with no driver: device/console/0 Freeing unused kernel memory: 172k freed Warning: u...

...pported. The same source should build on older systems, but obviously the newer kernel features won''t be available. As much as possible, this package tries to be source compatible across releases. Summary of changes: - converted to git - build fixes for some distributions - bug fix for xfrm monitor - alignment fixes for cris - documentation corrections - many small bug fixes - new tc monitor mode Contributors to this release Jamal Hadi Salim Patrick McHardy Andy Gay Jesper Dangaard Brouer Vince Worthington Git changelog is a bit of a mess, so if I missed your name sorry.

...in mirred [Thomas Graf] * Warn about wildcard deletions and provide IFA_ADDRESS upon deletions to enforce prefix length validation for IPv4. * Fix netlink message alignment when the last routing attribute added has a data length not aligned to RTA_ALIGNTO. [Masahide NAKAMURA] * ipv6 xfrm allocspi and monitor support. [Stephen Hemminger] * include/linux/netfilter_ipv4/ip_tables.h dont include compiler.h because it isn''t needed and not on all systems * Update rtnetlink.h and pkt_cls.h to be stripped versions of headers from 2.6.12-rc1 * switch to stack for netem t...

...is an new version of iproute2 for testing. http://developer.osdl.org/dev/iproute2/download/iproute2-2.6.10-ss050112.tar.gz Mostly simple merges, but could have some issues. Jamal did I get everything you sent? [Masahide Nakamura] ipmonitor shows IPv6 prefix list notification update to iproute2 xfrm for ipv6 [Stephen Hemminger] fix compile warnings when building 64bit system don''t include <asm/byteorder.h> warning about "ip route nat" no longer supported [Catalin(ux aka Dino) BOIE] fwmark in u32 filters [Andi Kleen] netlink manual page [Thomas Graf] tc tes...