1325 	KASSERT(src->scrub == NULL);  in pf_normalize_tcp_init()
1327 	src->scrub = pool_get(&pf_state_scrub_pl, PR_NOWAIT);  in pf_normalize_tcp_init()
1328 	if (src->scrub == NULL)  in pf_normalize_tcp_init()
1330 	bzero(src->scrub, sizeof(*src->scrub));  in pf_normalize_tcp_init()
1336 		src->scrub->pfss_ttl = h->ip_ttl;  in pf_normalize_tcp_init()
1343 		src->scrub->pfss_ttl = h->ip6_hlim;  in pf_normalize_tcp_init()
1358 	if (th->th_off > (sizeof(struct tcphdr) >> 2) && src->scrub &&  in pf_normalize_tcp_init()
1373 					src->scrub->pfss_flags |=  in pf_normalize_tcp_init()
1375 					src->scrub->pfss_ts_mod =  in pf_normalize_tcp_init()
1383 		    			src->scrub->pfss_tsval0 = ntohl(tsval);  in pf_normalize_tcp_init()
1384 					src->scrub->pfss_tsval = ntohl(tsval);  in pf_normalize_tcp_init()
1385 					src->scrub->pfss_tsecr = ntohl(tsecr);  in pf_normalize_tcp_init()
1386 					src->scrub->pfss_last = mono_time;  in pf_normalize_tcp_init()
1403 	if (state->src.scrub)  in pf_normalize_tcp_cleanup()
1404 		pool_put(&pf_state_scrub_pl, state->src.scrub);  in pf_normalize_tcp_cleanup()
1405 	if (state->dst.scrub)  in pf_normalize_tcp_cleanup()
1406 		pool_put(&pf_state_scrub_pl, state->dst.scrub);  in pf_normalize_tcp_cleanup()
1423 	KASSERT(src->scrub || dst->scrub);  in pf_normalize_tcp_stateful()
1433 		if (src->scrub) {  in pf_normalize_tcp_stateful()
1435 			if (h->ip_ttl > src->scrub->pfss_ttl)  in pf_normalize_tcp_stateful()
1436 				src->scrub->pfss_ttl = h->ip_ttl;  in pf_normalize_tcp_stateful()
1437 			h->ip_ttl = src->scrub->pfss_ttl;  in pf_normalize_tcp_stateful()
1444 		if (src->scrub) {  in pf_normalize_tcp_stateful()
1446 			if (h->ip6_hlim > src->scrub->pfss_ttl)  in pf_normalize_tcp_stateful()
1447 				src->scrub->pfss_ttl = h->ip6_hlim;  in pf_normalize_tcp_stateful()
1448 			h->ip6_hlim = src->scrub->pfss_ttl;  in pf_normalize_tcp_stateful()
1456 	    ((src->scrub && (src->scrub->pfss_flags & PFSS_TIMESTAMP)) ||  in pf_normalize_tcp_stateful()
1457 	    (dst->scrub && (dst->scrub->pfss_flags & PFSS_TIMESTAMP))) &&  in pf_normalize_tcp_stateful()
1489 					if (tsval && src->scrub &&  in pf_normalize_tcp_stateful()
1490 					    (src->scrub->pfss_flags &  in pf_normalize_tcp_stateful()
1496 						    src->scrub->pfss_ts_mod),  in pf_normalize_tcp_stateful()
1504 					if (tsecr && dst->scrub &&  in pf_normalize_tcp_stateful()
1505 					    (dst->scrub->pfss_flags &  in pf_normalize_tcp_stateful()
1508 						    - dst->scrub->pfss_ts_mod;  in pf_normalize_tcp_stateful()
1542 	if (src->scrub && (src->scrub->pfss_flags & PFSS_PAWS) &&  in pf_normalize_tcp_stateful()
1543 	    (mono_time.tv_sec - src->scrub->pfss_last.tv_sec > TS_MAX_IDLE ||  in pf_normalize_tcp_stateful()
1550 		src->scrub->pfss_flags = (src->scrub->pfss_flags & ~PFSS_PAWS)  in pf_normalize_tcp_stateful()
1553 	if (dst->scrub && (dst->scrub->pfss_flags & PFSS_PAWS) &&  in pf_normalize_tcp_stateful()
1554 	    mono_time.tv_sec - dst->scrub->pfss_last.tv_sec > TS_MAX_IDLE) {  in pf_normalize_tcp_stateful()
1560 		dst->scrub->pfss_flags = (dst->scrub->pfss_flags & ~PFSS_PAWS)  in pf_normalize_tcp_stateful()
1564 	if (got_ts && src->scrub && dst->scrub &&  in pf_normalize_tcp_stateful()
1565 	    (src->scrub->pfss_flags & PFSS_PAWS) &&  in pf_normalize_tcp_stateful()
1566 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {  in pf_normalize_tcp_stateful()
1645 		timersub(&mono_time, &src->scrub->pfss_last, &delta_ts);  in pf_normalize_tcp_stateful()
1652 		    (SEQ_LT(tsval, dst->scrub->pfss_tsecr) ||  in pf_normalize_tcp_stateful()
1653 		    SEQ_GT(tsval, src->scrub->pfss_tsval + tsval_from_last) ||  in pf_normalize_tcp_stateful()
1654 		    (tsecr && (SEQ_GT(tsecr, dst->scrub->pfss_tsval) ||  in pf_normalize_tcp_stateful()
1655 		    SEQ_LT(tsecr, dst->scrub->pfss_tsval0))))) {  in pf_normalize_tcp_stateful()
1664 			    SEQ_LT(tsval, dst->scrub->pfss_tsecr) ? '0' : ' ',  in pf_normalize_tcp_stateful()
1665 			    SEQ_GT(tsval, src->scrub->pfss_tsval +  in pf_normalize_tcp_stateful()
1667 			    SEQ_GT(tsecr, dst->scrub->pfss_tsval) ? '2' : ' ',  in pf_normalize_tcp_stateful()
1668 			    SEQ_LT(tsecr, dst->scrub->pfss_tsval0)? '3' : ' '));  in pf_normalize_tcp_stateful()
1674 			    (unsigned long)src->scrub->pfss_tsval,  in pf_normalize_tcp_stateful()
1675 			    (unsigned long)src->scrub->pfss_tsecr));  in pf_normalize_tcp_stateful()
1677 			    (unsigned long)dst->scrub->pfss_tsval,  in pf_normalize_tcp_stateful()
1678 			    (unsigned long)dst->scrub->pfss_tsecr,  in pf_normalize_tcp_stateful()
1679 			    (unsigned long)dst->scrub->pfss_tsval0));  in pf_normalize_tcp_stateful()
1694 	    src->scrub && dst->scrub &&  in pf_normalize_tcp_stateful()
1695 	    (src->scrub->pfss_flags & PFSS_PAWS) &&  in pf_normalize_tcp_stateful()
1696 	    (dst->scrub->pfss_flags & PFSS_PAWS)) {  in pf_normalize_tcp_stateful()
1723 		if (pd->p_len > 0 && (src->scrub->pfss_flags & PFSS_DATA_TS)) {  in pf_normalize_tcp_stateful()
1748 	if (pd->p_len > 0 && src->scrub && (src->scrub->pfss_flags &  in pf_normalize_tcp_stateful()
1751 			src->scrub->pfss_flags |= PFSS_DATA_TS;  in pf_normalize_tcp_stateful()
1753 			src->scrub->pfss_flags |= PFSS_DATA_NOTS;  in pf_normalize_tcp_stateful()
1754 			if (pf_status.debug >= PF_DEBUG_MISC && dst->scrub &&  in pf_normalize_tcp_stateful()
1755 			    (dst->scrub->pfss_flags & PFSS_TIMESTAMP)) {  in pf_normalize_tcp_stateful()
1769 	if (got_ts && src->scrub && PFSS_TIMESTAMP == (src->scrub->pfss_flags &  in pf_normalize_tcp_stateful()
1771 		src->scrub->pfss_last = mono_time;  in pf_normalize_tcp_stateful()
1772 		if (SEQ_GEQ(tsval, src->scrub->pfss_tsval) ||  in pf_normalize_tcp_stateful()
1773 		    (src->scrub->pfss_flags & PFSS_PAWS) == 0)  in pf_normalize_tcp_stateful()
1774 			src->scrub->pfss_tsval = tsval;  in pf_normalize_tcp_stateful()
1777 			if (SEQ_GEQ(tsecr, src->scrub->pfss_tsecr) ||  in pf_normalize_tcp_stateful()
1778 			    (src->scrub->pfss_flags & PFSS_PAWS) == 0)  in pf_normalize_tcp_stateful()
1779 				src->scrub->pfss_tsecr = tsecr;  in pf_normalize_tcp_stateful()
1781 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0 &&  in pf_normalize_tcp_stateful()
1782 			    (SEQ_LT(tsval, src->scrub->pfss_tsval0) ||  in pf_normalize_tcp_stateful()
1783 			    src->scrub->pfss_tsval0 == 0)) {  in pf_normalize_tcp_stateful()
1785 	    			src->scrub->pfss_tsval0 = tsval;  in pf_normalize_tcp_stateful()
1789 			if ((src->scrub->pfss_flags & PFSS_PAWS) == 0)  in pf_normalize_tcp_stateful()
1790 				src->scrub->pfss_flags |= PFSS_PAWS;  in pf_normalize_tcp_stateful()