kara_am

kara_am

[am kara]

Is there any suggestion to improve IPsec subsystem of
the kernel?


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping

Re: kara_am

[Holger Schurig]

am kara wrote:

> I have a suggestion for the documentation of the
> kernel. Placing a comment about the function of each
> file and folder inside the kernel.
> 
> This comment maybe short but saves a lot of time of a
> code reviewer.

I have a suggestion for the documentation of e-mails.
Use a proper subject for each message, and not always
the same subject.

Re: kara_am

[Bart Van Assche]

On Feb 5, 2008 1:10 PM, am kara <kara_am@yahoo.com> wrote:
> I am trying to understand IPsec and found some related
> subfolders

Please read this book (or a similar book) first:

Understanding Linux Network Internals
By Christian Benvenuti
Publisher: O'Reilly
Pub Date: December 2005
ISBN: 0-596-00255-6
Pages: 1062

Bart Van Assche.

kara_am

[am kara]

Is there any suggestion to improve IPsec subsystem of
the kernel?


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping

kara_am

[am kara]

I have a suggestion for the documentation of the
kernel. Placing a comment about the function of each
file and folder inside the kernel.

This comment maybe short but saves a lot of time of a
code reviewer.  


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping

kara_am

[am kara]

I am trying to understand IPsec and found some related
subfolders:
crypto, net/key, net/xfrm, net/netlink
and it may be more folders and files involved in the
process.

Would anyone please tell me how is the flow of
network(internet) information(traffic) from a user
process to the deepest layers of the kernel only by
the name of the most important files and folders in
case of IPsec and a typical TCP, IP(and IPsec) and
Ethernet adaptor senario?

For example: 
setkey(shell command)--> ....(some intermediate
processes)-->crypto(setkey method)  

I guess it should be:
net/ipv4-->net/key-->net/xfrm-->crypto
net/ipv4-->net/core-->net/core/dev.c

What is netlink, is it a kind of socket? how does it
become connected to IPsec? 






      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ