denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-pfkey: Report packet counts of IPsec SAs

Browse Source 
Seems that packet counts can be retrieved after all. At least the Linux
and FreeBSD kernels treat the number of allocations as number of packets.
We actually installed packet limits in that field already.
This commit is contained in:
Tobias Brunner
2014-09-09 10:56:15 +02:00
parent 8a59fa6467
commit 25fcbab678
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+2 -2
View File
@@ -1978,8 +1978,8 @@ METHOD(kernel_ipsec_t, query_sa, status_t,
}
if (packets)
{
/* not supported by PF_KEY */
*packets = 0;
/* at least on Linux and FreeBSD this contains the number of packets */
*packets = response.lft_current->sadb_lifetime_allocations;
}
if (time)
{