src/usr.bin/netstat/inet.c - diff

Return to inet.c CVS log

Up to [local] / src / usr.bin / netstat

Diff for /src/usr.bin/netstat/inet.c between version 1.162 and 1.163

-version 1.162, 2017/11/07 16:51:23
+version 1.163, 2018/08/13 14:36:54
 Line 1010
 Line 1010
 Line 1010
  }
  /*
+  * Dump IPsec statistics structure.
+  */
+ void
+ ipsec_stats(char *name)
+ {
+         struct ipsecstat ipsecstat;
+         int mib[] = { CTL_NET, PF_INET, IPPROTO_IP, IPCTL_IPSEC_STATS };
+         size_t len = sizeof(ipsecstat);
+         if (sysctl(mib, sizeof(mib) / sizeof(mib[0]),
+             &ipsecstat, &len, NULL, 0) == -1) {
+                 if (errno != ENOPROTOOPT)
+                         warn("%s", name);
+                 return;
+         }
+         printf("%s:\n", name);
+ #define p(f, m) if (ipsecstat.f || sflag <= 1) \
+         printf(m, ipsecstat.f, plural(ipsecstat.f))
+         p(ipsec_ipackets, "\t%llu input IPsec packet%s\n");
+         p(ipsec_opackets, "\t%llu output IPsec packet%s\n");
+         p(ipsec_ibytes, "\t%llu input byte%s\n");
+         p(ipsec_obytes, "\t%llu output byte%s\n");
+         p(ipsec_idecompbytes, "\t%llu input byte%s, decompressed\n");
+         p(ipsec_ouncompbytes, "\t%llu output byte%s, uncompressed\n");
+         p(ipsec_idrops, "\t%llu packet%s dropped on input\n");
+         p(ipsec_odrops, "\t%llu packet%s dropped on output\n");
+         p(ipsec_crypto, "\t%llu packet%s that failed crypto processing\n");
+         p(ipsec_noxform, "\t%llu packet%s for which no XFORM was set in TDB received\n");
+         p(ipsec_notdb, "\t%llu packet%s for which no TDB was found\n");
+ #undef p
+ }
+ /*
   * Dump ESP statistics structure.
   */
  void