From b50d486e78a387bc06f7f60d5e74dd08d48ea9a7 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Wed, 11 Dec 2013 14:36:21 +0100 Subject: kernel-wfp: Add some notes about query_sa/policy() support --- src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c') diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c index a131b8b32..fd27b4ffe 100644 --- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c +++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c @@ -1100,6 +1100,10 @@ METHOD(kernel_ipsec_t, query_sa, status_t, u_int32_t spi, u_int8_t protocol, mark_t mark, u_int64_t *bytes, u_int64_t *packets, time_t *time) { + /* It does not seem that WFP provides any means of getting per-SA traffic + * statistics. IPsecGetStatistics0/1() provides global stats, and + * IPsecSaContextEnum0/1() and IPsecSaEnum0/1() return the configured + * values only. */ return NOT_SUPPORTED; } @@ -1225,6 +1229,7 @@ METHOD(kernel_ipsec_t, query_policy, status_t, traffic_selector_t *dst_ts, policy_dir_t direction, mark_t mark, time_t *use_time) { + /* see query_sa() for some notes */ return NOT_SUPPORTED; } -- cgit v1.2.3