247  * Defines the various states an association can be within the NAT @{
252 #define SN_UP  0x0100		/**< Association in UP state */
286 #define SN_ADD_OK                 0   /**< Association added to the table */
326 static u_int sysctl_init_timer = 15; /**< Seconds to hold an association in the table waiting for a…
328 static u_int sysctl_up_timer = 300; /**< Seconds to hold an association in the table while no packe…
330 static u_int sysctl_shutdown_timer = 15; /**< Seconds to hold an association in the table waiting f…
332 static u_int sysctl_holddown_timer = 0; /**< Seconds to hold an association in the table after it h…
338 					  2 -  NAT will send local ErrorM and global ErrorM if there was a partial association match
343 …n the number of chunks that should be searched if there is no matching association (DoS prevention…
377     "Timeout value (s) to keep an association up with no traffic");
385     "Hold association in table for this many seconds after receiving a SHUTDOWN-COMPLETE");
395     "\t2 - to local and global if a partial association match,\n"
408     "association found:\n\t > 0 (A high value is a DoS risk)");
511  *                                                  a partial association match
552  * that should be processed if there is no current association found: > 0 (A
651 	/* Initialise association tables*/  in AliasSctpInit()
683  * NOTE: We do not need to traverse the look-up tables as each association
726  *   - Mark the association for removal from the tables
727  * - Potentially remove the association from all lookup tables
829 		// big error, remove association and go to idle and write log messages  in SctpAlias()
835 	/* Remove association if tagged for removal */  in SctpAlias()
871  * combination, if added, will produce a conflict in the association look up
873  * matching association in the NAT table and we are requesting an AddIP so we
874  * can add it.  The smallest valid SCTP packet while the association is in an
889  * @param assoc Pointer to current association details
1037  * relevant (existing) stored association from the Hash Tables or creates a new
1038  * association entity with state SN_ID
1044  * @param passoc Pointer to the association this SCTP Message belongs to
1129 			/* if no existing association, create a new one */  in sctp_PktParser()
1136 					/* Initialize association - sn_malloc initializes memory to zeros */  in sctp_PktParser()
1177 					if ((*passoc == NULL) && (direction == SN_TO_LOCAL)) { /* AddIP with no association */  in sctp_PktParser()
1195 				if (*passoc == NULL) { /* AddIP with no association */  in sctp_PktParser()
1200 					/* Initialize association  - sn_malloc initializes memory to zeros */  in sctp_PktParser()
1224 …/* if no association is found exit - we need to find an Init or AddIP within sysctl_initialising_c…  in sctp_PktParser()
1266  * @param l_vtag Pointer to the local vtag in the association this SCTP Message belongs to
1267  * @param g_vtag Pointer to the local vtag in the association this SCTP Message belongs to
1336  * @param assoc Pointer to the association this SCTP Message belongs to
1411 			/* add addresses to association */  in AddGlobalIPAddresses()
1467  * @param assoc Pointer to the association this SCTP Message belongs to
1494  * given Global IP addresses from the association. It will not delete the
1499  * @param assoc Pointer to the association this SCTP Message belongs to
1587  * association could potentially have a number of outstanding ASCONF
1592  * association (ie AddIP for a connection that the NAT does not know about
1596  * an ACK that it is responding to the AddIP and activate the new association.
1709  * - Determine the next state for the association
1722  * @param assoc Pointer to the association this SCTP Message belongs to
1742 	case SN_UP:  /* Association UP */  in ProcessSctpMsg()
1744 	case SN_CL:  /* Association Closing */  in ProcessSctpMsg()
1760  * @param assoc Pointer to the association this SCTP Message belongs to
1829  * @param assoc Pointer to the association this SCTP Message belongs to
1843 			if (assoc->num_Gaddr) /*If tracking global addresses for this association */  in INi_process()
1860 		assoc->state = SN_UP;/* association established for NAT */  in INi_process()
1881  * @param assoc Pointer to the association this SCTP Message belongs to
1904 			assoc->state = SN_UP; /* association established for NAT */  in INa_process()
1921  * @brief Process SCTP messages while association is UP redirecting packets
1923  * While in the SN_UP state, all packets for the particular association
1929  * @param assoc Pointer to the association this SCTP Message belongs to
1945 …TO_LOCAL) && assoc->num_Gaddr) /*If tracking global addresses for this association & from global s…  in UP_process()
1963  * @brief Process SCTP message while association is in the process of closing
1965  * This function waits for a SHUT-COMP to close the association. Depending on
1966  * the setting of sysctl_holddown_timer it may not remove the association
1973  * @param assoc Pointer to the association this SCTP Message belongs to
2011  * @brief Find the SCTP association given the local address, port and vtag
2013  * Searches the local look-up table for the association entry matching the
2023  * @return pointer to association or NULL
2054  * Searches the global look-up table for the association entry matching the
2058  * @param Cassoc association being checked for a clash
2060  * @return pointer to association or NULL
2091  * @brief Find the SCTP association given the global port and vtag
2093  * Searches the global look-up table for the association entry matching the
2098  * association, the NAT may respond with an ERRORM to request the missing
2107  * @return pointer to association or NULL
2137  * @brief Find the SCTP association for a T-Flag message (given the global port and local vtag)
2139  * Searches the local look-up table for a unique association entry matching the
2148  * @return pointer to association or NULL
2180  * @brief Find the SCTP association for a T-Flag message (given the local port and global vtag)
2182  * Searches the global look-up table for a unique association entry matching the
2191  * @return pointer to association or NULL
2219  * @brief  Add the sctp association information to the local look up table
2221  * Searches the local look-up table for an existing association with the same
2223  * is a repeated INIT packet, we need to remove this association from the
2224  * look-up table and add the new association
2226  * The new association is added to the head of the list and state is updated
2229  * @param assoc pointer to sctp association
2245 	 *    an association with the new global host  in AddSctpAssocLocal()
2248 	 *    association attempt will then be blocked if retried.  in AddSctpAssocLocal()
2277  * @brief  Add the sctp association information to the global look up table
2279  * Searches the global look-up table for an existing association with the same
2281  * is a repeated INIT packet, we need to remove this association from the
2282  * look-up table and add the new association
2284  * The new association is added to the head of the list and state is updated
2287  * @param assoc pointer to sctp association
2327  * @brief Remove the sctp association information from the look up table
2329  * For each of the two (local/global) look-up tables, remove the association
2333  *       association structure itself
2335  * NOTE: The association is NOT removed from the timer queue
2338  * @param assoc pointer to sctp association
2350 	/* log if association is fully up and now closing */  in RmSctpAssoc()
2405  * for normal packets sent during an association. When a timer expires, it is
2408  * every U_T (every few minutes) for a particular association.
2411  * @brief Add an association timeout to the timer queue
2414  * association into the list at that queue position
2432  * @brief Remove an association from timer queue
2434  * This is an O(1) operation to remove the association pointer from its
2438  * @param assoc pointer to sctp association
2450  * Reset the actual timeout for the specified association. If it is earlier than
2451  * the existing timeout, then remove and re-install the association into the
2455  * @param assoc pointer to sctp association
2474  * the timer queue until now (the current time). For each association in the
2478  * - Remove the association from the NAT tables
2479  * - Release the memory used by the association
2481  * If the timer hasn't really expired we place the association into its new
2521  * a simple message, through logging an association details to logging the
2603  * @brief Log an SCTP association's details
2605  * @param assoc pointer to sctp association