<dec f='src/src/sys/netipsec/ipsec.h' l='309' type='int ipsec_chkreplay(u_int32_t , const struct secasvar * )'/>
<def f='src/src/sys/netipsec/ipsec.c' l='2122' ll='2173' type='int ipsec_chkreplay(u_int32_t seq, const struct secasvar * sav)'/>
<doc f='src/src/sys/netipsec/ipsec.c' l='2112'>/*
 * Check the variable replay window.
 * ipsec_chkreplay() performs replay check before ICV verification.
 * ipsec_updatereplay() updates replay bitmap.  This must be called after
 * ICV verification (it also performs replay check, which is usually done
 * beforehand).
 * 0 (zero) is returned if packet disallowed, 1 if packet permitted.
 *
 * based on RFC 2401.
 */</doc>
<use f='src/src/sys/netipsec/xform_ah.c' l='665' u='c' c='ah_input'/>
<use f='src/src/sys/netipsec/xform_esp.c' l='355' u='c' c='esp_input'/>
