1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
/*
* IKE and IPsec Statistics for the pluto daemon
*
* Copyright (C) 2017 Paul Wouters <pwouters@redhat.com>
* Copyright (C) 2019-2019 Andrew Cagney <cagney@gnu.org>
* Copyright (C) 2019 D. Hugh Redelmeier <hugh@mimosa.com>
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <https://www.gnu.org/licenses/gpl2.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*
*/
#ifndef _PLUTO_STATS_H
#define _PLUTO_STATS_H
enum sa_type;
enum terminate_reason;
struct pluto_stat {
const enum_names *names;
const char *what;
unsigned long floor;
unsigned long *count;
unsigned long count_ceiling;
};
/* All statistics are totals since pluto daemon startup */
extern unsigned long pstats_invalidke_recv_s[OAKLEY_GROUP_PSTATS_ROOF];
extern unsigned long pstats_invalidke_recv_u[OAKLEY_GROUP_PSTATS_ROOF];
extern unsigned long pstats_invalidke_sent_s[OAKLEY_GROUP_PSTATS_ROOF];
extern unsigned long pstats_invalidke_sent_u[OAKLEY_GROUP_PSTATS_ROOF];
struct pstats_bytes {
uint64_t in;
uint64_t out;
};
extern struct pstats_bytes pstats_ipsec_bytes; /* total wire IPsec traffic */
extern struct pstats_bytes pstats_esp_bytes;
extern struct pstats_bytes pstats_ah_bytes;
extern struct pstats_bytes pstats_ipcomp_bytes;
extern struct pstats_bytes pstats_ike_bytes; /* total IKE traffic */
extern unsigned long pstats_ikev1_sent_notifies_e[v1N_ERROR_PSTATS_ROOF]; /* types of NOTIFY ERRORS */
extern unsigned long pstats_ikev1_recv_notifies_e[v1N_ERROR_PSTATS_ROOF]; /* types of NOTIFY ERRORS */
extern const struct pluto_stat pstats_ikev2_sent_notifies_e; /* types of NOTIFY ERRORS */
extern const struct pluto_stat pstats_ikev2_recv_notifies_e; /* types of NOTIFY ERRORS */
extern const struct pluto_stat pstats_ikev2_sent_notifies_s; /* types of NOTIFY STATUS */
extern const struct pluto_stat pstats_ikev2_recv_notifies_s; /* types of NOTIFY STATUS */
extern const struct pluto_stat pstats_stf_status; /* count state transitions */
extern unsigned long pstats_ike_dpd_recv;
extern unsigned long pstats_ike_dpd_sent;
extern unsigned long pstats_ike_dpd_replied;
extern unsigned long pstats_iketcp_started[2];
extern unsigned long pstats_iketcp_aborted[2];
extern unsigned long pstats_iketcp_stopped[2];
extern unsigned long pstats_pamauth_started;
extern unsigned long pstats_pamauth_stopped;
extern unsigned long pstats_pamauth_aborted;
extern unsigned long pstats_ikev2_redirect_failed;
extern unsigned long pstats_ikev2_redirect_completed;
extern void show_pluto_stats(struct show *s);
extern void clear_pluto_stats(void);
/*
* This (assuming it works) is less evil then an array index
* out-of-bound; which isn't saying much.
*
* "unsigned" forces negative values to large positive ones,
* presumably INDEX fits in "unsigned". Is size_t better?
*
* pstats() debug logs overflow
*
* pstat() counts anything <.FLOOR or >= .roof as .roof (the array is
* oversized).
*/
#define pstats(TYPE,INDEX) { \
const unsigned __pstat = (INDEX); \
if (__pstat < elemsof(pstats_##TYPE)) { \
pstats_##TYPE[__pstat]++; \
} else if (DBGP(DBG_BASE)) { \
DBG_log("pstats %s %d", #TYPE, __pstat); \
} \
}
#define pstat(TYPE,INDEX) \
{ \
const struct pluto_stat *ps_ = &pstats_##TYPE; \
/* underflow forces -ve value to large positive */ \
const unsigned long pstat_ = (INDEX) - ps_->floor; \
if (pstat_ > ps_->count_ceiling) { \
/* array has count_celing+1 entries */ \
ps_->count[ps_->count_ceiling]++; \
} else { \
ps_->count[pstat_]++; \
} \
}
void pstat_sa_started(struct state *st, enum sa_type sa_type);
void pstat_sa_failed(struct state *st, enum terminate_reason reason);
void pstat_sa_established(struct state *st);
void pstat_sa_deleted(struct state *st);
#endif /* _PLUTO_STATS_H */
|
