Page MenuHomeFreeBSD

D50899.id157196.diff
No OneTemporary

D50899.id157196.diff

diff --git a/sys/netinet/tcp_syncache.c b/sys/netinet/tcp_syncache.c
--- a/sys/netinet/tcp_syncache.c
+++ b/sys/netinet/tcp_syncache.c
@@ -1097,6 +1097,7 @@
*/
if (locked && !V_tcp_syncookies) {
SCH_UNLOCK(sch);
+ TCPSTAT_INC(tcps_sc_spurcookie);
if ((s = tcp_log_addrs(inc, th, NULL, NULL)))
log(LOG_DEBUG, "%s; %s: Spurious ACK, "
"segment rejected (syncookies disabled)\n",
@@ -1106,6 +1107,7 @@
if (locked && !V_tcp_syncookiesonly &&
sch->sch_last_overflow < time_uptime - SYNCOOKIE_LIFETIME) {
SCH_UNLOCK(sch);
+ TCPSTAT_INC(tcps_sc_spurcookie);
if ((s = tcp_log_addrs(inc, th, NULL, NULL)))
log(LOG_DEBUG, "%s; %s: Spurious ACK, "
"segment rejected (no syncache entry)\n",
@@ -1119,6 +1121,7 @@
sc = &scs;
TCPSTAT_INC(tcps_sc_recvcookie);
} else {
+ TCPSTAT_INC(tcps_sc_failcookie);
if ((s = tcp_log_addrs(inc, th, NULL, NULL)))
log(LOG_DEBUG, "%s; %s: Segment failed "
"SYNCOOKIE authentication, segment rejected "
diff --git a/sys/netinet/tcp_var.h b/sys/netinet/tcp_var.h
--- a/sys/netinet/tcp_var.h
+++ b/sys/netinet/tcp_var.h
@@ -1015,6 +1015,8 @@
uint64_t tcps_sc_zonefail; /* zalloc() failed */
uint64_t tcps_sc_sendcookie; /* SYN cookie sent */
uint64_t tcps_sc_recvcookie; /* SYN cookie received */
+ uint64_t tcps_sc_spurcookie; /* SYN cookie spurious, rejected */
+ uint64_t tcps_sc_failcookie; /* SYN cookie failed, rejected */
uint64_t tcps_hc_added; /* entry added to hostcache */
uint64_t tcps_hc_bucketoverflow;/* hostcache per bucket limit hit */
diff --git a/usr.bin/netstat/inet.c b/usr.bin/netstat/inet.c
--- a/usr.bin/netstat/inet.c
+++ b/usr.bin/netstat/inet.c
@@ -768,8 +768,12 @@
p1a(tcps_sc_unreach, "\t\t{:unreachable/%ju} {N:/unreach}\n");
p(tcps_sc_zonefail, "\t\t{:zone-failures/%ju} {N:/zone failure%s}\n");
p(tcps_sc_sendcookie, "\t{:sent-cookies/%ju} {N:/cookie%s sent}\n");
- p(tcps_sc_recvcookie, "\t{:receivd-cookies/%ju} "
+ p(tcps_sc_recvcookie, "\t{:received-cookies/%ju} "
"{N:/cookie%s received}\n");
+ p(tcps_sc_spurcookie, "\t{:spurious-cookies/%ju} "
+ "{N:/spurious cookie%s rejected}\n");
+ p(tcps_sc_failcookie, "\t{:failed-cookies/%ju} "
+ "{N:/failed cookie%s rejected}\n");
xo_close_container("syncache");

File Metadata

Mime Type
text/plain
Expires
Fri, Jul 24, 7:14 AM (12 h, 47 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
35435785
Default Alt Text
D50899.id157196.diff (2 KB)

Event Timeline