PF_SN_LIMIT
{ .type = PF_RT_SRC_NODES_LIMIT, .off = _OUT(r.src_nodes_type[PF_SN_LIMIT]), .cb = snl_attr_get_uint64 },
printf(", %s", sn_type_names[PF_SN_LIMIT]);
(uintmax_t)rule->src_nodes_type[PF_SN_LIMIT],
struct pf_ksrc_node *src_node = state->sns[PF_SN_LIMIT];
KASSERT(sn_type != PF_SN_LIMIT || (raddr == NULL && rkif == NULL),
KASSERT(sn_type != PF_SN_LIMIT || (rule->rule_flag & PFRULE_SRCTRACK),
if (sn_type == PF_SN_LIMIT && rule->max_src_nodes &&
if (sn_type == PF_SN_LIMIT)
if (sn_type == PF_SN_LIMIT && rule->max_src_states &&
if (sn_type == PF_SN_LIMIT && s->src.tcp_est)
NULL, NULL, pd->af, PF_SN_LIMIT)) != 0) {
state->sns[PF_SN_LIMIT] != NULL &&
state->sns[PF_SN_LIMIT] != NULL &&
if (state->sns[PF_SN_LIMIT] != NULL &&
} else if (state->sns[PF_SN_LIMIT] != NULL &&
if (st->sns[PF_SN_LIMIT] != NULL)
if (st->sns[PF_SN_LIMIT] != NULL)
if (st->sns[PF_SN_LIMIT] != NULL)
if (sn->type == PF_SN_LIMIT) {
nlattr_add_u64(nw, PF_RT_SRC_NODES_LIMIT, counter_u64_fetch(rule->src_nodes[PF_SN_LIMIT]));
if (s->sns[PF_SN_LIMIT] != NULL)
if (s->sns[PF_SN_LIMIT] != NULL) {
if (s->sns[PF_SN_LIMIT]->rule == &V_pf_default_rule)
if (s->sns[PF_SN_LIMIT] != NULL)