rcmd, rresvport, iruserok, ruserok, rcmd_af, rresvport_af, iruserok_af, ruserok_af – routines for returning a stream to a remote command Synopsis#include <netdb.h> /* Or <unistd.h> on some systems */ int rcmd(char **ahost, unsigned short inport, const char *locuser, const char *remuser, const char *cmd, int *fd2p); int rresvport(int *port); int iruserok(uint32_t raddr, int superuser, const char *ruser,…
rcmd, rresvport, iruserok, ruserok, rcmd_af, rresvport_af, iruserok_af, ruserok_af – routines for returning a stream to a remote command Synopsis#include <netdb.h> /* Or <unistd.h> on some systems */ int rcmd(char **ahost, unsigned short inport, const char *locuser, const char *remuser, const char *cmd, int *fd2p); int rresvport(int *port); int iruserok(uint32_t raddr, int superuser, const char *ruser,…
irsim-analyzer Synopsisanalyzer node… DescriptionThe analyzer provides a graphical interface to irsim; displaying the state of the nodes (or vectors) node… Every invocation of the analyzer command adds a new set of signals to the display list. The view is split into 3 regions: a trace window, a text window, and a banner. The banner displays…
ipsec_ttoul, ipsec_ultot – convert unsigned-long numbers to and from text Synopsis#include <freeswan.h> const char *ttoul(const char * src, size_t srclen, int base, unsigned long * n); size_t ultot(unsigned long n, int format, char * dst, size_t dstlen);DescriptionTtoul converts a text-string number into a binary unsigned long value. Ultot does the reverse conversion, back to a text version. Numbers are specified in text as decimal (e.g. 123),…
ipsec_ttosa, ipsec_satot, ipsec_initsaid – convert IPsec Security Association IDs to and from text, initialize an SA ID Synopsis#include <libreswan.h> typedef struct { ip_address dst; ipsec_spi_t spi; int proto; } ip_said; const char *ttosa(const char *src, size_t srclen, ip_said *sa); size_t satot(const ip_said *sa, int format, char *dst, size_t dstlen); void…
ipsec_ttodata, ipsec_datatot – convert binary data bytes from and to text formats Synopsis#include <freeswan.h> const char *ttodata(const char * src, size_t srclen, int base, char * dst, size_t dstlen, size_t * lenp); const char *ttodatav(const char * src, size_t srclen, int base, char * dst, size_t dstlen, size_t * lenp, char * errp, size_t errlen, int flags); size_t datatot(const char * src, size_t srclen, int format, char * dst, size_t dstlen);DescriptionTtodata, ttodatav, and datatot convert arbitrary binary data (e.g. encryption or authentication keys) from…
ipsec_ttoaddr, ipsec_tnatoaddr, ipsec_addrtot, ipsec_ttosubnet, ipsec_subnettot – convert Internet addresses and Subnet masks to and from text Synopsis#include <libreswan.h> const char *ttoaddr(const char *src, size_t srclen, int af, ip_address *addr); const char *tnatoaddr(const char *src, size_t srclen, int af, ip_address *addr); size_t addrtot(const ip_address *addr, int format, char *dst, size_t dstlen); const char…
ipsec_subnetof, ipsec_hostof, ipsec_broadcastof – given Internet address and subnet mask return subnet number, host part, broadcast address Synopsis#include <libreswan.h> struct in_addr subnetof(struct in_addr addr, struct in_addr mask); struct in_addr hostof(struct in_addr addr, struct in_addr mask); struct in_addr broadcastof(struct in_addr addr, struct in_addr mask); DescriptionThese functions are obsolete; see ipsec_networkof(3) for their replacements….
ipsec_sameaddr, ipsec_addrcmp, ipsec_samesubnet, ipsec_addrinsubnet, ipsec_subnetinsubnet, ipsec_subnetishost, ipsec_samesaid, ipsec_sameaddrtype, ipsec_samesubnettype – do comparisons for addresses, subnets, SA IDs and address families Synopsis#include <libreswan.h> int sameaddr(const ip_address *a, const ip_address *b); int addrcmp(const ip_address *a, const ip_address *b); int samesubnet(const ip_subnet *a, const ip_subnet *b); int addrinsubnet(const ip_address *a, const ip_subnet *s); int subnetinsubnet(const ip_subnet *a, const…
ipsec_rangetosubnet – convert address range to subnet Synopsis#include <freeswan.h> const char *rangetosubnet(const ip_address * start, const ip_address * stop, ip_subnet * dst);DescriptionRangetosubnet accepts two IP addresses which define an address range, from start to stop inclusive, and converts this to a subnet if possible. The addresses must both be IPv4 or both be IPv6, and the address family of the resulting…
ipsec_portof, ipsec_setportof, ipsec_sockaddrof, ipsec_sockaddrlenof – get port field of an ip_address, set port field of an ip_address, get pointer to internal sockaddr of an ip_address, get length of internal sockaddr of an ip_address Synopsis#include <libreswan.h> int portof(const ip_address *src); void setportof(int port, ip_address *dst); struct sockaddr *sockaddrof(ip_address *src); size_t sockaddrlenof(const ip_address *src); DescriptionThe <libreswan.h> internal…
ipsec_initsubnet, ipsec_addrtosubnet, ipsec_subnettypeof, ipsec_masktocount, ipsec_networkof, ipsec_maskof – initialize an ip_subnet, initialize a singleton ip_subnet, get address type of an ip_subnet, convert subnet mask to bit count, get base address of an ip_subnet, get subnet mask of an ip_subnet Synopsis#include <libreswan.h> const char *initsubnet(const ip_address *addr, int maskbits, int clash, ip_subnet *dst); const char *addrtosubnet(const…
ipsec_initaddr, ipsec_addrtypeof, ipsec_addrlenof, ipsec_addrbytesof, ipsec_addrbytesptr – initialize an ip_address, get address type of an ip_address, get length of address within an ip_address, get copy of address within an ip_address, get pointer to address within an ip_address Synopsis#include <libreswan.h> const char *initaddr(const char *src, size_t srclen, int af, ip_address *dst); int addrtypeof(const ip_address *src); size_t…
ipsec_goodmask, ipsec_masktobits, ipsec_bitstomask – check if Internet subnet mask is valid, convert Internet subnet mask to bit count, convert bit count to Internet subnet mask Synopsis#include <libreswan.h> int goodmask(struct in_addr mask); int masktobits(struct in_addr mask); struct in_addr bitstomask(int n); DescriptionThese functions are obsolete; see ipsec_masktocount(3) for a partial replacement. Goodmask reports whether the subnet mask…
ipsec_atoul, ipsec_ultoa – convert unsigned-long numbers to and from ASCII Synopsis#include <libreswan.h> const char *atoul(const char * src, size_t srclen, int base, unsigned long * n); size_t ultoa(unsigned long n, int base, char * dst, size_t dstlen);DescriptionThese functions are obsolete; see ipsec_ttoul(3) for their replacements. Atoul converts an ASCII number into a binary unsigned long value. Ultoa does the reverse conversion, back to an ASCII version….
ipsec_atoasr, ipsec_rangetoa – convert ASCII to Internet address, subnet, or range, convert Internet address range to ASCII Synopsis#include <libreswan.h> const char *atoasr(const char *src, size_t srclen, char *type, struct in_addr *addrs); size_t rangetoa(struct in_addr *addrs, int format, char *dst, size_t dstlen); DescriptionThese functions are obsolete; there is no current equivalent, because so far…
ipsec_atoaddr, ipsec_addrtoa, ipsec_atosubnet, ipsec_subnettoa – convert Internet addresses and Subnet masks to and from ASCII Synopsis#include <libreswan.h> const char *atoaddr(const char *src, size_t srclen, struct in_addr *addr); size_t addrtoa(struct in_addr addr, int format, char *dst, size_t dstlen); const char *atosubnet(const char *src, size_t srclen, struct in_addr *addr, struct in_addr *mask); size_t subnettoa(struct…
ipsec_anyaddr, ipsec_isanyaddr, ipsec_unspecaddr, ipsec_isunspecaddr, ipsec_loopbackaddr, ipsec_isloopbackaddr – get and test for addresses of type "any", "unspecified" and loopback get "any" address Synopsis#include <libreswan.h> const char *anyaddr(int af, ip_address *dst); int isanyaddr(const ip_address *src); const char *unspecaddr(int af, ip_address *dst); int isunspecaddr(const ip_address *src); const char *loopbackaddr(int af, ip_address *dst); int isloopbackaddr(const ip_address *src); DescriptionThese functions…
ipq_set_verdict — issue verdict and optionally modified packet to kernel Synopsis#include <linux/netfilter.h> #include <libipq.h> int ipq_set_verdict(const struct ipq_handle *h, ipq_id_t id, unsigned int verdict, size_t data_len, unsigned char *buf); DescriptionThe ipq_set_verdict function issues a verdict on a packet previously obtained with ipq_read, specifing the intended disposition of the packet, and optionally supplying a modified version…
ipq_set_mode — set the ip_queue queuing mode Synopsis#include <linux/netfilter.h> #include <libipq.h> int ipq_set_mode(const struct ipq_handle *h, u_int8_t mode, size_t range); DescriptionThe ipq_set_mode function sends a message to the kernel ip_queue module, specifying whether packet metadata only, or packet payloads as well as metadata should be copied to userspace. The h parameter is a context handle…