From: Martin Willi <martin@revosec.ch>
Date: Wed, 11 Dec 2013 13:36:21 +0000 (+0100)
Subject: kernel-wfp: Add some notes about query_sa/policy() support
X-Git-Tag: 5.2.0dr6~22^2~41
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b50d486e78a387bc06f7f60d5e74dd08d48ea9a7;p=thirdparty%2Fstrongswan.git

kernel-wfp: Add some notes about query_sa/policy() support
---

diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
index a131b8b321..fd27b4ffed 100644
--- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
+++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
@@ -1100,6 +1100,10 @@ METHOD(kernel_ipsec_t, query_sa, status_t,
 	u_int32_t spi, u_int8_t protocol, mark_t mark, u_int64_t *bytes,
 	u_int64_t *packets, time_t *time)
 {
+	/* It does not seem that WFP provides any means of getting per-SA traffic
+	 * statistics. IPsecGetStatistics0/1() provides global stats, and
+	 * IPsecSaContextEnum0/1() and IPsecSaEnum0/1() return the configured
+	 * values only. */
 	return NOT_SUPPORTED;
 }
 
@@ -1225,6 +1229,7 @@ METHOD(kernel_ipsec_t, query_policy, status_t,
 	traffic_selector_t *dst_ts, policy_dir_t direction, mark_t mark,
 	time_t *use_time)
 {
+	/* see query_sa() for some notes */
 	return NOT_SUPPORTED;
 }