svn commit: r353290 - in head: share/man/man4 sys/netinet

[Michael Tuexen]

Author: tuexen
Date: Mon Oct  7 20:35:04 2019
New Revision: 353290
URL: https://svnweb.freebsd.org/changeset/base/353290

Log:
  In r343587 a simple port filter as sysctl tunable was added to siftr.
  The new sysctl was not added to the siftr.4 man page at the time.
  This updates the man page, and removes one left over trailing whitespace.
  
  Submitted by:		Richard Scheffenegger
  Reviewed by:		bcr@
  MFC after:		3 days
  Differential Revision:	https://reviews.freebsd.org/D21619

Modified:
  head/share/man/man4/siftr.4
  head/sys/netinet/siftr.c

Modified: head/share/man/man4/siftr.4
==============================================================================
--- head/share/man/man4/siftr.4	Mon Oct  7 20:21:23 2019	(r353289)
+++ head/share/man/man4/siftr.4	Mon Oct  7 20:35:04 2019	(r353290)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd March 18, 2015
+.Dd October 7, 2019
 .Dt SIFTR 4
 .Os
 .Sh NAME
@@ -130,6 +130,14 @@ By default, the value is set to 0, which means no hash
 The hashes are useful to correlate which TCP packet triggered the generation of
 a particular log message, but calculating them adds additional computational
 overhead into the fast path.
+.El
+.Bl -tag -offset indent -width Va
+.It Va net.inet.siftr.port_filter
+controls on which source or destination port siftr should capture
+.Nm .
+By default, the value is set to 0, which means all ports are eligible for logging.
+Set to any other value, only packets where either the source or destination
+port is equal to this number are logged.
 .El
 .Ss Log Format
 A typical

Modified: head/sys/netinet/siftr.c
==============================================================================
--- head/sys/netinet/siftr.c	Mon Oct  7 20:21:23 2019	(r353289)
+++ head/sys/netinet/siftr.c	Mon Oct  7 20:35:04 2019	(r353290)
@@ -918,7 +918,7 @@ siftr_chkpkt(struct mbuf **m, struct ifnet *ifp, int f
 	 * Only pkts selected by the tcp port filter
 	 * can be inserted into the pkt_queue
 	 */
-	if ((siftr_port_filter != 0) && 
+	if ((siftr_port_filter != 0) &&
 	    (siftr_port_filter != ntohs(inp->inp_lport)) &&
 	    (siftr_port_filter != ntohs(inp->inp_fport))) {
 		goto inp_unlock;