add tcp sack stats, similar to freebsd; ok deraadt

1. tcp_xmit_timer(): remove extra rtt decrement (t_rtttime is 0-based
while t_rtt was 1-based), update callers
2. define and use TCP_RTT_BASE_SHIFT instead of the hardcoded 2.
3. add missing shift

1. tcp_xmit_timer(): remove extra rtt decrement (t_rtttime is 0-based
while t_rtt was 1-based), update callers
2. define and use TCP_RTT_BASE_SHIFT instead of the hardcoded 2.
3. add missing shifts when t_srtt/t_rttvar are used.
4. update the comments: t_srtt uses 5 bits of fraction (not 3)
and t_rttvar uses 4 bits
5. remove obsolete/unused macros TCP_RTT_SCALE and TCP_RTTVAR_SCALE
6. make sure rttmin is not > TCPTV_REXMTMAX
parts from netbsd, ok mcbride, henning

show more ...

Modulate tcp_now by a random amount on a per-connection basis.

ok markus@ frantzen@

set the congestion window to two segments (instead of only one), this matches
the window size he have when entering the established state. ok deraadt@

don't send partial segments if SS_ISSENDING is set, remember
TF_LASTIDLE across invocations of tcp_output (from freebsd);
ok mcbride

remove #ifdef TUBA

factor out md5 code; ok+tests henning@, djm@, hshoexer@

set m_pkthdr.len early; ok mcbride, deraadt

work around an LP64 problem where we report an excessively large window
due to incorrect mixing of types.

From NetBSD

ok cedric@ markus@

Replace RSA-derived md5 code with code derived from Colin Plumb's PD version.
This moves md5.c out of libkern and into sys/crypto where it belongs (as
requested by markus@). Note that md5.c is still

Replace RSA-derived md5 code with code derived from Colin Plumb's PD version.
This moves md5.c out of libkern and into sys/crypto where it belongs (as
requested by markus@). Note that md5.c is still mandatory (dev/rnd.c uses it).
Verified with IPsec + hmac-md5 and tcp md5sig. OK henning@ and hshoexer@

show more ...

- allow the user to force the TCP mss below the fail-safe 216 with a low
interface MTU.
- break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion
when the TCP mss ends up larger than

- allow the user to force the TCP mss below the fail-safe 216 with a low
interface MTU.
- break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion
when the TCP mss ends up larger than the interface MTU (when the if_mtu is
smaller than the tcp header). connections will still stall
feedback from itojun@, claudio@ and provos and testing from beck@

show more ...

don't allocate a cluster if the header fits into a mbuf;
ok itojun@, henning@, mcbride@

check TF_SIGNATURE when calculating the mss; add TCPOLEN_SIGLEN and
avoid magic constants; ok henning@

!sack_disable -> sack_enable; ok deraadt@

add gettdbbysrcdst(), just like gettdb(), but compares tdb_src as well; ok mcbride@

es tanzt das KNF

syncache+ipv6 support for TCP_SIGNATURE; with itojun; ok deraadt

de-register. deraadt ok

do not flip ip_len/ip_off in netinet stack. deraadt ok.
(please test, especially PF portion)

backout following:
>use m_pulldown not m_pullup2. fix some bugs in IPv6 tcp_trace().

PR 3283 fixed (confirmed)

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

use m_pulldown not m_pullup2. fix some bugs in IPv6 tcp_trace().

don't send more than half of the send buffer space limit in
one tcp segment, improves performance of tcp over interfaces
with large mtu (e.g. lo0); based on similar change in netbsd;
ok djm, henning,

don't send more than half of the send buffer space limit in
one tcp segment, improves performance of tcp over interfaces
with large mtu (e.g. lo0); based on similar change in netbsd;
ok djm, henning, henric, millert, deraadt

show more ...

Fix a problem where passing NULL as a pointer with varargs does not promote
NULL to full 64 bits on a 64 bit address system. Soultion is to add a
(void *) cast before NULL. This makes a 64 bit MIPS k

Fix a problem where passing NULL as a pointer with varargs does not promote
NULL to full 64 bits on a 64 bit address system. Soultion is to add a
(void *) cast before NULL. This makes a 64 bit MIPS kernel work and will
probably help future 64 bit ports as well.

OK from art@

show more ...

whitespace