Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Bulk sync of pf changes from head, in attempt to fixup broken build I
made in r263029.

Merge r257186,257215,257349,259736,261797.

These changesets split pfvar.h into several smaller headers and make
userland utilities to include only some of them.

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Revert r250394, which disabled snmp_hast due to libl dependency issue --
the dependency has been removed in r250503.

Unbreak build - this can only build on i386 as-is due to use of libl in
a .so file, and we currently (intentionally) only build libl.a.

HAST module for bsnmpd(1).

Reviewed by: harti, pjd
MFC after: 2 weeks

Bring in a SNMP module that allows configuration of SNMPv3 Notification targets.

Sponsored by: The FreeBSD Foundation
Reviewed by: philip
Approved by: philip

In bsnmpd(1) add support for SNMPv3 message processing model, including message authentication, packet encryption & view-based access control (RFC 3412, 3414, 3415).

Sponsored by: The FreeBSD Foundation
Reviewed by: philip@ (mostly)
Approved by: philip@

Connect the snmp_wlan(3) module to the build.

Sponsored by: The FreeBSD Foundation

Only build the bsnmpd netgraph module if MK_NETGRAPH_SUPPORT is set.

Re-connect snmp_bridge to the build. It survived a make universe
(apart from powerpc where the build broke earlier).

ia64 is nit-picking according to tinderbox so temporary disconnect
the bridge module from the build until this is fixed.

Connect the snmp_bridge(3) module to the build.

Approved by: bz (mentor)

Reimplementation of world/kernel build options. For details, see:

http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)

After changing hostres from libdisk to libgeom, it now compiles
and runs on amd64, so revert the stopgap from rev. 1.10

Approved by: harti
Hardware borrowed from: simon

Unbreak the AMD64 build by forgoing the 'snmp_hostres' functionality.

Approved by: harti

Connect the HOSTRES MIB to the build.

Add snmp_pf, a bsnmpd module for monitoring (not managing!) pf firewalls.
Currently implemented are most things related to states and interfaces, todo
are address tables and altq. I've tried to keep this roughly in sync with a
project implementing this for net-snmpd.

Reviewed by: harti, dhartmei
MFC after: 1 month

NOATM -> NO_ATM

Link to the build again. The problem was that we need a new
gensnmptree for the .def file to parse. This was fixed in
Makefile.inc1.

Again something bad is happening so comment out the ATM module.

Now, after the import of NgATM-1.1, re-enable the atm module.

Disable the snmp_atm module until the source gets fixed. This will unbreak
this portion of the build.

Link the snmp_atm module to the build unless NOATM is defined.

Add build infrastructure for libbsnmp and the modules. Add the
netgraph module for the SNMP daemon.