CVS log for src/sbin/brconfig/brconfig.c

Up to [cvs.NetBSD.org] / src / sbin / brconfig

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Pull up following revision(s) (requested by ozaki-r in ticket #818):

	sys/net/if_bridgevar.h: revision 1.39
	sbin/brconfig/brconfig.c: revision 1.18
	tests/net/if_bridge/unicast.pcap.uue: revision 1.1
	tests/net/if_bridge/t_bridge.sh: revision 1.20
	sbin/brconfig/brconfig.8: revision 1.21
	tests/net/if_bridge/t_bridge.sh: revision 1.21
	sys/net/if_bridge.c: revision 1.194
	tests/net/if_bridge/Makefile: revision 1.4
	distrib/sets/lists/tests/mi: revision 1.1336
	tests/net/if_bridge/broadcast.pcap.uue: revision 1.1

bridge: implement interface protection

It enables a feature similar to "protected-port" or "isolation" in some
router products by marking member interfaces protected; when a frame
arrives on a protected interface and is being forwarded to another
protected interface, the frame will be discarded.

The code is developed by the SEIL team at IIJ.

tests: dedup test scripts like others

brconfig: add protect/-protect commands

It marks/clears a specified interface "protected".
tests, bridge: add tests for interface protection

The original author of the test is k-goda@IIJ.  ozaki-r improved
the test slightly.

distrib: install uuencoded pcap files for testing

brconfig: add protect/-protect commands

It marks/clears a specified interface "protected".

Use the new BRDGGIFS and BRDGRTS cmds which just use ifdrv directly.

constness doesn't increase by applying more const.

Constify an array of strings.

sync with head

the address expire counter is just a time difference; it can turn
negative after the timer expired until the entry is deleted.
make it signed, so that we don't get output like
"00:1b:78:12:50:46 wm0 18446744073709551349 flags=0<>"

static + __dead

Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html

fix sign-compare issues

Coverity CID 774: Don't increment a pointer *before* testing it for NULL!

remove IFFBITS definition.  now net/if.h has it.

PR/29748 from FUKAUMI Naoki.

Remove main() prototype; WARNS=3

Add (unsigned char) to isdidgit call

realloc pedant

Apply patch (requested by bouyer in ticket #1355):

Fix 2 bugs:
- initialise stp when the bridge is turned up, without this stp will
  keep all interfaces disabled in a sequence like:
  brconfig bridge0 add if0 add if1 stp if0 stp if1 up
- s/BRDGSPRI/BRDGSIFPRIO in brconfig.c:cmd_ifpriority()

add a command (ifpathcost) to change the stp path cost of the STP path
cost of an interface. Display the interface path cost with the others
STP parameters.

Add NetBSD RCS Ids.

Fix 2 bugs:
- initialise stp when the bridge is turned up, without this stp will keep
  all interfaces disabled in a sequence like:
  brconfig bridge0 add if0 add if1 stp if0 stp if1 up
- s/BRDGSPRI/BRDGSIFPRIO in brconfig.c:cmd_ifpriority()

add a command (ifpathcost) to change the stp path cost of the STP path cost of
an interface. Display the interface path cost with the others STP parameters.

Make BRIDGE_IPF an option, and document it.  Add it (commented) to GENERIC.
Let brconfig tell whether the bridge is using the ipfilter hook, or not.

Add ipf packet-filtering option to if_bridge.  The option is controlled at
compile-time by BRIDGE_IPF, and at runtime by brconfig with the {ipf,-ipf}
option on a per-bridge basis.

As a side-effect, add PFIL_HOOKS processing to if_bridge.

Fix typo in error message.

Configuration utility for bridge(4) devices.