On Fri, Jul 27, 2007 at 05:28:20PM +0800, blue wrote:
[]
> I was tracing the codes so had the conclusion. in key_spdflush() in key.c,
> the loop
>
> for (dir = 0; dir < IPSEC_DIR_MAX; dir++) {
> SPTREE_LOCK();
> LIST_FOREACH(sp, &sptree[dir], chain)
> sp->sta
[EMAIL PROTECTED] wrote:
At Thu, 26 Jul 2007 11:13:53 +0800,
blue wrote:
Hi, all:
Recently I found the behavior for the command "setkey -FP" is quite
different for the latest version IPsec (known as FAST_IPSEC before).
Before the command would erase all the existed SP entries; currently t
At Thu, 26 Jul 2007 11:13:53 +0800,
blue wrote:
>
> Hi, all:
>
> Recently I found the behavior for the command "setkey -FP" is quite
> different for the latest version IPsec (known as FAST_IPSEC before).
> Before the command would erase all the existed SP entries; currently the
> command would
Hi, all:
Recently I found the behavior for the command "setkey -FP" is quite
different for the latest version IPsec (known as FAST_IPSEC before).
Before the command would erase all the existed SP entries; currently the
command would not. After digging the codes, I found the state of the SP
en
