enum ipsec_xmit_value ipsec_xmit_ipcomp_setup(struct ipsec_xmit_state *ixs)
{
unsigned int flags = 0;
unsigned int tot_len, old_tot_len;
#ifdef CONFIG_KLIPS_IPV6
if (lsw_ip_hdr_version(ixs) == 6)
old_tot_len = ntohs(lsw_ip6_hdr(ixs)->payload_len) +
sizeof(struct ipv6hdr);
else
#endif
old_tot_len = ntohs(lsw_ip4_hdr(ixs)->tot_len);
ixs->ipsp->ips_comp_ratio_dbytes += old_tot_len;
ixs->skb = skb_compress(ixs->skb, ixs->ipsp, &flags);
ixs->iph = (void *)ip_hdr(ixs->skb);
#ifdef CONFIG_KLIPS_IPV6
if (lsw_ip_hdr_version(ixs) == 6) {
IPSEC_FRAG_OFF_DECL(frag_off)
int nexthdroff;
unsigned char nexthdr = lsw_ip6_hdr(ixs)->nexthdr;
nexthdroff = ipsec_ipv6_skip_exthdr(ixs->skb,
((void *)(lsw_ip6_hdr(ixs) + 1)) -
(void*)ixs->skb->data,
&nexthdr, &frag_off);
ixs->iphlen = nexthdroff - (ixs->iph - (void*)ixs->skb->data);
tot_len = ntohs(lsw_ip6_hdr(ixs)->payload_len) +
sizeof(struct ipv6hdr);
} else
enum ipsec_xmit_value
ipsec_xmit_ipcomp_setup(struct ipsec_xmit_state *ixs)
{
unsigned int flags = 0;
#ifdef CONFIG_KLIPS_DEBUG
unsigned int old_tot_len = ntohs(ixs->iph->tot_len);
#endif /* CONFIG_KLIPS_DEBUG */
ixs->ipsp->ips_comp_ratio_dbytes += ntohs(ixs->iph->tot_len);
ixs->skb = skb_compress(ixs->skb, ixs->ipsp, &flags);
#ifdef NET_21
ixs->iph = ixs->skb->nh.iph;
#else /* NET_21 */
ixs->iph = ixs->skb->ip_hdr;
#endif /* NET_21 */
ixs->ipsp->ips_comp_ratio_cbytes += ntohs(ixs->iph->tot_len);
#ifdef CONFIG_KLIPS_DEBUG
if (debug_tunnel & DB_TN_CROUT)
{
if (old_tot_len > ntohs(ixs->iph->tot_len))
KLIPS_PRINT(debug_tunnel & DB_TN_CROUT,
"klips_debug:ipsec_xmit_encap_once: "
"packet shrunk from %d to %d bytes after compression, cpi=%04x (should be from spi=%08x, spi&0xffff=%04x.\n",
old_tot_len, ntohs(ixs->iph->tot_len),
ntohs(((struct ipcomphdr*)(((char*)ixs->iph) + ((ixs->iph->ihl) << 2)))->ipcomp_cpi),
ntohl(ixs->ipsp->ips_said.spi),
(__u16)(ntohl(ixs->ipsp->ips_said.spi) & 0x0000ffff));
else
KLIPS_PRINT(debug_tunnel & DB_TN_CROUT,
"klips_debug:ipsec_xmit_encap_once: "
"packet did not compress (flags = %d).\n",
flags);
}
#endif /* CONFIG_KLIPS_DEBUG */
return IPSEC_XMIT_OK;
}
