| #ifndef __NETNS_XFRM_H | 
 | #define __NETNS_XFRM_H | 
 |  | 
 | #include <linux/list.h> | 
 | #include <linux/wait.h> | 
 | #include <linux/workqueue.h> | 
 | #include <linux/xfrm.h> | 
 |  | 
 | struct ctl_table_header; | 
 |  | 
 | struct xfrm_policy_hash { | 
 | 	struct hlist_head	*table; | 
 | 	unsigned int		hmask; | 
 | }; | 
 |  | 
 | struct netns_xfrm { | 
 | 	struct list_head	state_all; | 
 | 	/* | 
 | 	 * Hash table to find appropriate SA towards given target (endpoint of | 
 | 	 * tunnel or destination of transport mode) allowed by selector. | 
 | 	 * | 
 | 	 * Main use is finding SA after policy selected tunnel or transport | 
 | 	 * mode. Also, it can be used by ah/esp icmp error handler to find | 
 | 	 * offending SA. | 
 | 	 */ | 
 | 	struct hlist_head	*state_bydst; | 
 | 	struct hlist_head	*state_bysrc; | 
 | 	struct hlist_head	*state_byspi; | 
 | 	unsigned int		state_hmask; | 
 | 	unsigned int		state_num; | 
 | 	struct work_struct	state_hash_work; | 
 | 	struct hlist_head	state_gc_list; | 
 | 	struct work_struct	state_gc_work; | 
 |  | 
 | 	wait_queue_head_t	km_waitq; | 
 |  | 
 | 	struct list_head	policy_all; | 
 | 	struct hlist_head	*policy_byidx; | 
 | 	unsigned int		policy_idx_hmask; | 
 | 	struct hlist_head	policy_inexact[XFRM_POLICY_MAX * 2]; | 
 | 	struct xfrm_policy_hash	policy_bydst[XFRM_POLICY_MAX * 2]; | 
 | 	unsigned int		policy_count[XFRM_POLICY_MAX * 2]; | 
 | 	struct work_struct	policy_hash_work; | 
 |  | 
 | 	struct sock		*nlsk; | 
 |  | 
 | 	u32			sysctl_aevent_etime; | 
 | 	u32			sysctl_aevent_rseqth; | 
 | 	int			sysctl_larval_drop; | 
 | 	u32			sysctl_acq_expires; | 
 | #ifdef CONFIG_SYSCTL | 
 | 	struct ctl_table_header	*sysctl_hdr; | 
 | #endif | 
 | }; | 
 |  | 
 | #endif |