OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: David Gwynne (dlgcvs.openbsd.org)
Date: Fri Jul 09 2010 - 06:16:45 CDT


CVSROOT: /cvs
Module name: src
Changes by: dlgcvs.openbsd.org 2010/07/09 05:16:45

Modified files:
        sys/net : if_pfsync.c

Log message:
the current code doesnt detect when its filled a bulk packet so it
keeps on building them, which means that it floods the tx ring on
the pfsync interface rather than actually sending many packets.

this change correctly calculates when we've filled a bulk update
packet.

many thanks to david for making me go chase this. ive been wondering
why the state count on my firewalls has had such a discrepency for
a long time now.