]> Gitweb @ Texas Instruments - Open Source Git Repositories - git.TI.com/gitweb - keystone-rtos/netapi.git/blobdiff - ti/runtime/netapi/test/net_test.c
NETAPI net test application updates
[keystone-rtos/netapi.git] / ti / runtime / netapi / test / net_test.c
index 6ea95fc553e61279c89b82ab7851c8e13209c23f..87f2adfafef0fdbeaa0c27f832087675303b530b 100755 (executable)
@@ -1,15 +1,15 @@
-/******************************************
+/******************************************************************************
  * File: net_test.c
  * Purpose: test app for netapi
- **************************************************************
+ ******************************************************************************
  * FILE:  net_test.c
  * 
  * DESCRIPTION:  netapi user space transport
  *               library  test application
  * 
- * REVISION HISTORY:  rev 0.0.1 
+ * REVISION HISTORY:
  *
- *  Copyright (c) Texas Instruments Incorporated 2010-2011
+ *  Copyright (c) Texas Instruments Incorporated 2013
  * 
  *  Redistribution and use in source and binary forms, with or without 
  *  modification, are permitted provided that the following conditions 
  *  (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 
  *  OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
- *****************************************/
-
-#include "stdlib.h"
-#include "stdio.h"
+ *****************************************************************************/
 
-#include "trie.h"
-#include "string.h"
-#include "netapi.h"
-#include "pktio.h"
-#include <sys/resource.h>
 
-/*************debug********************/
-void dump_descr(unsigned long *p, int n)
-{
-   printf("--------dump of descriptor %d %x\n", n, (int) p);
-   printf("> %x %x %x %x %x %x %x %x\n",p[0],p[1],p[2],p[3],p[4],p[5],p[6],p[7]);
-   printf("> %x %x %x %x %x %x %x %x\n",p[8],p[9],p[10],p[11],p[12],p[13],p[14],p[15]);
-   printf("-----------------------------\n");
-}
-/*****************************************/
-
-
-//************for multi pkt burst  xfer test in loopback mode
-#define TX_BURST 4
-int pktloopback=TUNE_NETAPI_NWAL_ENABLE_PASS_LOOPBACK;
-
-//this device: 10.0.0.100, mac 0x,01,02,03,04,05  and .. 0x6
-
-//test packet, setup for loopback (so dest is ourself)
-static uint8_t testPkt[] = {
-
-  /* MAC header */
-  0x00, 0x01, 0x02, 0x03, 0x04, 0x05,
-  0x00, 0xe0, 0xa6, 0x66, 0x57, 0x04,
-  0x08, 0x00,
-
-  /* IP header */
-  0x45, 0x00,
-  0x00, 0x6c,  /* Length (including this header) */
-  0x00, 0x00, 0x00, 0x00, 0x05, 0x11,
-  0x00, 0x00,  /* Header checksum */
-  0x0a, 0x00, 0x00, 0x0a, 0x0a, 0x00, 0x00, 0x64,
-
-  /* UDP header */
-  0x12, 0x34, 0x05, 0x55,
-  0x00, 0x58,  /* Length, including this header */
-  0x00, 0x00,  /* Header checksum */
-
- /* Payload */
-  0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39,
-  0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40, 0x41,
-  0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x49,
-  0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51,
-  0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, 0x59,
-  0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60, 0x61,
-  0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69,
-  0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70, 0x71,
-  0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79,
-  0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80, 0x81
+#include "net_test.h"
+#include "ti/drv/nwal/test/fw_rm.h"
+#include <signal.h>
+#include <pthread.h>
 
-};
+extern int QUIT;
+extern netTestStats_T stats[TUNE_NETAPI_NUM_CORES];
+extern paSysStats_t netcp_stats;
 
-#define TEST_PAYLOAD_LEN            80
 
-#define TEST_PKT_IP_OFFSET_BYTES        14
-#define TEST_PKT_UDP_OFFSET_BYTES       34
-#define TEST_PKT_PLOAD_OFFSET_BYTES     42
-#define TEST_PKT_UDP_HDR_LEN            8
-/* Offsets to length fields */
-#define TEST_PKT_OFFSET_IP_LEN      16
-#define TEST_PKT_OFFSET_UDP_LEN     38
+netTestConfig_t netTestCfg;
+static netTestConfigFile_t config_file;
 
-#define TEST_PKT_LEN                122
+char    input_file_name[] = "/etc/netapi/net_test_config.txt";
+nwal_RetValue       nwalRetVal;
+Pktlib_HeapHandle   ourHeap;
 
-/* The pseudo header checksum of the packet except for the 16 bit length */
-#define TEST_PKT_PSEUDO_HDR_CHKSUM_SANS_LEN  0x0FFC
+PKTIO_HANDLE_T *netcp_rx_chan;
+PKTIO_HANDLE_T *netcp_tx_chan_no_crypto;
+PKTIO_HANDLE_T *netcp_tx_chan_esp;
+PKTIO_HANDLE_T *netcp_tx_chan_ah;
+PKTIO_HANDLE_T *netcp_sb_tx_chan;
+PKTIO_HANDLE_T *netcp_sb_rx_chan;
+
+PKTIO_CFG_T netcp_rx_cfg={PKTIO_RX, PKTIO_NA, PKTIO_NA, 8};
+PKTIO_CFG_T netcp_rx_cfg2={PKTIO_RX, (PKTIO_GLOBAL|PKTIO_PKT), PKTIO_Q_ANY, 8};
+PKTIO_CFG_T netcp_tx_cfg={PKTIO_TX, PKTIO_NA, PKTIO_NA, 8};
+PKTIO_CFG_T netcp_sb_rx_cfg={PKTIO_RX, PKTIO_NA, PKTIO_NA, 8};
+PKTIO_CFG_T netcp_sb_tx_cfg={PKTIO_TX, PKTIO_NA, PKTIO_NA, 8};
+
+NETCP_CFG_IP_T ip_rule[NET_TEST_MAX_IP];
+NETCP_CFG_MACIF_T mac[NET_TEST_MAX_MAC];
+
+#ifdef netTest_DSP_FASTPATH
+PKTIO_HANDLE_T *dsp_pktio_channels[CPU_NUM_REM_FAST_PATH_CORES];
+NETCP_CFG_CLASS_T dsp_classifers[CPU_NUM_REM_FAST_PATH_CORES];
+NETCP_CFG_FLOW_HANDLE_T dsp_flow_handles[CPU_NUM_REM_FAST_PATH_CORES];
+#endif
+NETCP_CFG_EXCEPTION_PKT_T expPkt_appid;
 
+Trie *p_trie_sa_rx;
+Trie *p_trie_sa_tx;
 
 
-#if 1
-//#include "arpa/inet.h"
-long htonl(long x)
+/*******************************************
+ *************NETAPI OBJECTS***************
+ *****************************************/
+static NETAPI_CFG_T our_netapi_default_cfg=
 {
-       long temp = (x&0xff000000)>>24 | (x&0xff0000)>>8 | (x&0xff00)<<8 |  (x&0xff)<<24 ;
-       return temp;
-}
+    TUNE_NETAPI_PERM_MEM_SZ,
+    128,  //start of packet offset for hw to place data on rx for default flow
+    TUNE_NETAPI_QM_CONFIG_MAX_DESC_NUM, //max number of descriptors in system
+    TUNE_NETAPI_NUM_GLOBAL_DESC,        //total we will use
+    TUNE_NETAPI_DEFAULT_NUM_BUFFERS,   //#descriptors+buffers in default heap
+    64, //#descriptors w/o buffers in default heap
+    TUNE_NETAPI_DEFAULT_BUFFER_SIZE+128+128,  //size of buffers in default heap
+    128   ,  //tail room
+    256      //extra room
+};
+
+NETAPI_T netapi_handle;
+NETAPI_SCHED_HANDLE_T * our_sched;
+#ifdef netTest_MULTI_THREAD
+NETAPI_SCHED_HANDLE_T * scheduler[TUNE_NETAPI_NUM_CORES];
+#endif
+NETAPI_SCHED_CONFIG_T our_sched_cfg={
+  NETAPI_SCHED_DURATION|NETAPI_SCHED_CBV, 0, house, 5000000  //every 5000000 poll loops
+};
+
+netTestSA_t sa_info[MAX_SEC_INDEX];
+NETCP_CFG_IPSEC_POLICY_T rx_policy[MAX_SEC_INDEX];
+
+
 
-/********************************************************************
- *  FUNCTION PURPOSE: Ones complement addition utility
- ********************************************************************
- ********************************************************************/
-uint16_t test_utilOnesComplementAdd (uint16_t v1, uint16_t v2)
-{
-  uint32_t result;
 
-  result = (uint32_t)v1 + (uint32_t)v2;
-  result = (result >> 16) + (result & 0xffff);
-  result = (result >> 16) + (result & 0xffff);
 
-  return ((uint16_t)result);
-}
 
 /********************************************************************
- *  FUNCTION PURPOSE: Ones complement checksum utility
+ * FUNCTION PURPOSE:  Utility function to flip and packet and send
+ *                    it back to its source.
  ********************************************************************
+ * DESCRIPTION:   Utility function to flip and packet and send
+ *                    it back to its source.
  ********************************************************************/
- uint16_t test_utilOnesCompChkSum (uint8_t *p, uint32_t nwords)
-{
-  uint16_t chksum = 0;
-  uint16_t v;
-  uint32_t i;
-  uint32_t j;
-
-  for (i = j = 0; i < nwords; i++, j+=2)  {
-    v = (p[j] << 8) | p[j+1];
-    chksum = test_utilOnesComplementAdd (chksum, v);
-  }
-  return (chksum);
-} /* utilOnesCompChkSum */
-
-/**************************************************************************************
- * FUNCTION PURPOSE: Compute ipv4 psudo checksum
- **************************************************************************************
- * DESCRIPTION: Compute ipv4 psudo checksum
- **************************************************************************************/
-uint16_t test_utilGetIpv4PsudoChkSum (uint8_t *data, uint16_t payloadLen)
+void flip_and_send_pkt(Ti_Pkt *tip,  unsigned char * p_pkt, int len, int flag, uint16_t enet_port)
 {
-  uint16_t psudo_chksum;
-
-  psudo_chksum = test_utilOnesCompChkSum (&data[12], 4);
-  psudo_chksum = test_utilOnesComplementAdd(psudo_chksum, (uint16_t) data[9]);
-  psudo_chksum = test_utilOnesComplementAdd(psudo_chksum, payloadLen);
-
-  return (psudo_chksum);
-
-} /* utilGetIpv4PsudoChkSum */
+    unsigned char mac_temp[6];
+    unsigned char ip_temp[4];
+    unsigned char new_dest_port[2]={0x75,0x30};  // 30000
+    uint16_t dest_udp_port_config = 0;
+    uint16_t blah; 
+    uint16_t i=1;   /* for testing only */
+
+    uint8_t *p_spi; 
+    netTestSA_t * p_sa_info;
+    netTestSA_t *p_sa_info_tx;
+    uint8_t p_iv[16];
+    uint8_t p_add[8];
+    Cppi_HostDesc*          pPloadDesc;
+    uint8_t ah_len;
+    uint32_t tunnel_id;
+    nwalLocCxtInfo_t    nwalLocCxt;
+    netTestHead_T * p_head;
+    netTestHead_T temp_head;
+    int pkt_type;
+
+#ifdef netTest_MULTI_THREAD
+    int coreid=Osal_nwalGetProcId(); //who we are(thread local)
+        //int coreid = our_core;
+#else
+int coreid=0;
+#endif
+              // netTest_utilDumpBuffer((long*)p_pkt,len);
+    Pktlib_setPacketLen(tip,len);
+    //flip the mac address
+    memcpy(&mac_temp,&p_pkt[0],6);
+    memcpy(&p_pkt[0],&p_pkt[6],6);
+    memcpy(&p_pkt[6],&mac_temp,6);
+    //memcpy(&p_pkt[0],real_mac_header,6); //for testing to wireshark pc
+
+    //flip the ip  (outer in case of ipsec)
+    memcpy(&ip_temp, &p_pkt[netTest_MAC_HEADER_LEN+12],4);
+    memcpy(&p_pkt[netTest_MAC_HEADER_LEN+12],&p_pkt[netTest_MAC_HEADER_LEN+12+4],4);
+    memcpy(&p_pkt[netTest_MAC_HEADER_LEN+12+4],&ip_temp,4);
 
+    p_head=&temp_head;
 
+    //inner ip &udp for ipsec
+    if (flag) 
+    {
+        memcpy(p_head,&p_pkt[netTest_MAC_HEADER_LEN],sizeof(netTestHead_T));
+
+        if ((p_head->ip[2]&0x0000ff00)==0x00003300)
+        {
+            p_spi = &(p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN + 4]);
+            pkt_type = netTest_IPSEC_AH_PKT;
+        }
+        else if ((p_head->ip[2]&0x0000ff00)==0x00003200)
+        {
+            p_spi = &(p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN]);
+            pkt_type = netTest_IPSEC_ESP_PKT;
+        }
+        else
+        {
+            netapi_Log("flip_and_send_pkt: un-supported IPSEC protocol\n");
+            Pktlib_freePacket(tip);
+            return;
+        }
+
+        p_sa_info = (netTestSA_t *) trie_lookup(p_trie_sa_rx, (char *)p_spi ,4);
+        if (p_sa_info == NULL)
+        {
+            netapi_Log("flip_and_send_pkt(): trie_lookup() failed\n");
+            Pktlib_freePacket(tip);
+            return;
+        }
+        tunnel_id = p_sa_info->tunnel_id;
+        p_sa_info_tx = (netTestSA_t *) trie_lookup(p_trie_sa_tx, (char *)&tunnel_id ,4);
+        if (p_sa_info_tx == NULL)
+        {
+            netapi_Log("flip_and_send_pkt(): trie_lookup() failed\n");
+            Pktlib_freePacket(tip);
+            return;
+        }
+        //just drop non-udp packet
+        if (p_pkt[p_sa_info->tx_payload_info.encOffset+9]!=0x11)
+        {
+            stats[coreid].n_new+=1;Pktlib_freePacket(tip); return;
+        }
+
+        /* flip inner IP */
+        memcpy(&ip_temp, &p_pkt[p_sa_info->tx_payload_info.encOffset+12],4);
+        memcpy(&p_pkt[p_sa_info->tx_payload_info.encOffset+12],&p_pkt[p_sa_info->tx_payload_info.encOffset+12+4],4);
+        memcpy(&p_pkt[p_sa_info->tx_payload_info.encOffset+12+4],&ip_temp,4);
+        /* setting udp ports */
+        if (netTestCfg.dest_udp_port_config == 0)
+        {
+            memcpy(&p_pkt[p_sa_info->tx_payload_info.encOffset+netTest_IP_HEADER_LEN+2],
+                   &p_pkt[p_sa_info->tx_payload_info.encOffset+netTest_IP_HEADER_LEN],2);
+        }
+        else
+        {
+           dest_udp_port_config = htons(netTestCfg.dest_udp_port_config);
+            memcpy(&p_pkt[p_sa_info->tx_payload_info.encOffset+netTest_IP_HEADER_LEN+2],
+                   &dest_udp_port_config,2);
+        }
+        memset(&p_pkt[p_sa_info->tx_payload_info.encOffset+netTest_IP_HEADER_LEN+6],0,2); //checksum
+
+        if (netTestCfg.ipsec_mode_tx == IPSEC_MODE_TX_SIDEBAND)
+        {
+            /* inner ip checksum : leave alone, outer ip, set to 0 (we will compute on way out */
+            memset(&p_pkt[netTest_MAC_HEADER_LEN+10],0,2);
+        }
+    }
+    else
+    {
+        /* flip udp port */
+        if (netTestCfg.dest_udp_port_config == 0)
+        {
+            memcpy(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+2],
+                   &p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN],2);
+        }
+        else
+        {
+            dest_udp_port_config = htons(netTestCfg.dest_udp_port_config);
+            //memcpy(&p_pkt[netTest_MAC_HEADER_LEN+20+2],&new_dest_port[0],2);
+            memcpy(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+2],&dest_udp_port_config,2);
+        }
+
+        memset(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+6],0,2);//0 udp checksum (we will compute on way out)
+    }
 
+    /*IPSEC case */ 
+    if (flag)
+    {
+        if (netTestCfg.ipsec_mode_tx == IPSEC_MODE_TX_SIDEBAND)
+        //send to crypto for encryption
+        //12 byte auth tag
+        {
+            PKTIO_METADATA_T meta = {PKTIO_META_SB_TX,{0},0};
+            int err;
+            nwalDmTxPayloadInfo_t meta_tx={0};
+            
+            meta.sa_handle = (void*)p_sa_info_tx->tx_tunnel;  //use TX SA APPID
+
+            memcpy(&meta_tx, &(p_sa_info->tx_payload_info), sizeof(nwalDmTxPayloadInfo_t));
+            meta_tx.appCtxId = (nwal_AppId)p_sa_info_tx;
+            meta_tx.encSize = len - p_sa_info->tx_payload_info.encOffset -p_sa_info->auth_tag_size;
+            meta_tx.authSize = len - meta_tx.authOffset - p_sa_info->auth_tag_size;
+            meta_tx.pAuthIV=NULL;
+            meta_tx.aadSize=0;
+            meta_tx.pAad=NULL;
+            if (p_sa_info->cipherMode ==  NWAL_SA_EALG_AES_CTR)
+            {
+                memcpy(&p_iv[0], &p_sa_info->key_params->pEncKey[16], 4);
+                memcpy(&p_iv[4], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                p_iv[12] = 0;
+                p_iv[13] = 0;
+                p_iv[14] = 0;
+                p_iv[15] = 1;
+                meta_tx.pEncIV = &p_iv[0];
+            }
+            else if ((p_sa_info->cipherMode == NWAL_SA_EALG_AES_GCM) || (p_sa_info->cipherMode == NWAL_SA_EALG_AES_CCM))
+            {
+                memcpy(&p_iv[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                meta_tx.pEncIV = &p_iv[0];
+                memcpy(&p_add[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN], 8);
+                meta_tx.pAad= &p_add[0];
+                meta_tx.aadSize = 8;
+            }
+            else if (p_sa_info->authMode == NWAL_SA_AALG_GMAC)
+            {
+                memcpy(&p_iv[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                meta_tx.pAuthIV= &p_iv[0];
+                memcpy(&p_add[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN], 8);
+                meta_tx.pAad= &p_add[0];
+                meta_tx.aadSize = 8;
+            }
+            else if (p_sa_info->cipherMode ==  NWAL_SA_EALG_NULL)
+            {
+                meta_tx.pEncIV = NULL;
+            }
+            else
+            {
+                meta_tx.pEncIV = &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN ];
+            }
+            /* post it to netcp sb tx channel*/
+            meta.u.tx_sb_meta=&meta_tx;
+
+            netapi_pktioSend(netcp_sb_tx_chan,tip,&meta,&err);
+        }
+        else
+        {
+            //INFLOW TX, send pkt directly, asking for IP and UDP checksum offloads AND IPSEC to be applied
+            PKTIO_METADATA_T meta = {PKTIO_META_TX,{0},0};
+            int err;
+            nwalTxPktInfo_t meta_tx={0};
+
+            meta.sa_handle = (void*)p_sa_info_tx->tx_tunnel;  //use TX SA APPID
+
+            meta_tx.startOffset = p_sa_info_tx->tx_pkt_info.startOffset;
+            meta_tx.ipOffBytes =p_sa_info_tx->tx_payload_info.encOffset; 
+            meta_tx.l4OffBytes = p_sa_info_tx->tx_pkt_info.l4OffBytes;
+            meta_tx.l4HdrLen = p_sa_info_tx->tx_pkt_info.l4HdrLen;
+            meta_tx.ploadLen = (unsigned) ((p_pkt[meta_tx.l4OffBytes+4]<<8)|p_pkt[meta_tx.l4OffBytes+4+1]) -8 ;
+            meta_tx.saOffBytes=  p_sa_info_tx->tx_pkt_info.saOffBytes;
+            if (pkt_type == netTest_IPSEC_AH_PKT)
+            {
+                memset(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+netTest_IPSEC_AH_FIXED_HDR_SIZE],0,netTest_IPSEC_AH_FIXED_HDR_SIZE);
+                meta_tx.txFlag1 = p_sa_info_tx->tx_pkt_info.txFlag1;
+                meta_tx.saPayloadLen=len-netTest_MAC_HEADER_LEN;   //don't inlcude mac 
+                meta_tx.saAhMacSize = 12;
+                meta_tx.saAhIcvOffBytes = netTest_MAC_HEADER_LEN + netTest_IP_HEADER_LEN + netTest_IPSEC_AH_FIXED_HDR_SIZE;
+                
+                meta_tx.enetPort = enet_port;
+                 memcpy(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+4],&p_sa_info_tx->spi,4);
+            }
+            else if (pkt_type == netTest_IPSEC_ESP_PKT)
+            {
+                meta_tx.txFlag1 = p_sa_info_tx->tx_pkt_info.txFlag1;
+                meta_tx.saPayloadLen=len-netTest_MAC_HEADER_LEN-netTest_IP_HEADER_LEN;   //don't include mac and ip outer header
+                meta_tx.enetPort = 0;
+                 memcpy(&p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN],&p_sa_info_tx->spi,4);
+            }
+            else
+            {
+                printf("flip_and_send_pkt: invalid ESP protocol\n");
+                return;
+            }
+
+            meta_tx.pseudoHdrChecksum =
+            netTest_utilGetIPv4PsudoChkSum(&p_pkt[meta_tx.ipOffBytes],8+ meta_tx.ploadLen);
+
+
+            /* post it to netcp tx channel*/
+            meta.u.tx_meta=&meta_tx;
+#ifdef DEBUG_DESC
+            if (stats[coreid].sec_tx<20) netTest_utilDumpDescr((long *) tip, stats[coreid].sec_tx);
 #endif
-typedef struct stats_t
-{
-        long itx;  //initially generated
-       long rx;
-       long tx;
-       long n_bad;
-       long n_new;
-} STATS_T;
-
-typedef struct head_t
-{
-       long ip[5];
-       long udp[2];
-} HEAD_T;
+            if ( pkt_type == netTest_IPSEC_ESP_PKT)
+                netapi_pktioSend(netcp_tx_chan_esp,tip,&meta,&err);
+            else if ( pkt_type == netTest_IPSEC_AH_PKT)
+                 netapi_pktioSend(netcp_tx_chan_ah,tip,&meta,&err);
+            stats[coreid].tx +=1;
+            stats[coreid].sec_tx +=1;
+        }
+    }
+    else  //non ipsec send pkt directly, asking for IP and UDP checksum ofload
+    {
+        PKTIO_METADATA_T meta2 = {PKTIO_META_TX,{0},0};
+        int err;
+        nwalTxPktInfo_t meta_tx2={0};
+        meta2.sa_handle=nwal_HANDLE_INVALID;
+        meta_tx2.txFlag1 = (NWAL_TX_FLAG1_DO_UDP_CHKSUM| NWAL_TX_FLAG1_META_DATA_VALID );
+        meta_tx2.startOffset = 0;
+        meta_tx2.ipOffBytes = netTest_MAC_HEADER_LEN;
+        meta_tx2.l4OffBytes = netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN;
+        meta_tx2.l4HdrLen = netTest_UDP_HEADER_LEN;
+        meta_tx2.ploadLen = (unsigned) ((p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+4]<<8)|
+                                        p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN+4+1]) -8 ;
+        meta_tx2.pseudoHdrChecksum =
+        netTest_utilGetIPv4PsudoChkSum(&p_pkt[netTest_MAC_HEADER_LEN],8+ meta_tx2.ploadLen);
+
+        /* post it to netcp tx channel*/
+        meta2.u.tx_meta=&meta_tx2;
+        netapi_pktioSend(netcp_tx_chan_no_crypto,tip,&meta2,&err);
+        stats[coreid].tx +=1;
+    }
+}
 
-typedef struct key_t
+
+/**********************************************************************
+ * FUNCTION PURPOSE:  Sideband Accelerator Callback PKT RECEIVE HANDLER
+ **********************************************************************
+ * DESCRIPTION:   Sideband Accelerator Callback PKT RECEIVE HANDLER
+ *                Handles Decrypt and Encrypt operation callbacks
+ **********************************************************************/
+void recv_sb_cb(struct PKTIO_HANDLE_Tag * channel, Ti_Pkt* p_recv[],
+                         PKTIO_METADATA_T meta[], int n_pkts,
+                         uint64_t ts )
 {
-  long src_ip;
-  long dst_ip;
-  short src_port;
-  short dst_port;
-} KEY_T;
-
-unsigned char mac0[]={0x00,0x01,0x02,0x03,0x04,0x05}; //interface 0
-unsigned char mac1[]={0x00,0x01,0x02,0x03,0x04,0x06}; //interface 1
-nwalIpAddr_t OurIp0={ 10, 0, 0, 100, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
-
-#if 1  //goes with real tx (to laptop) 
-unsigned char real_mac_header[]={0xd4,0xbe,0xd9,0x00,0xd3,0x7e,
-                      0x00,0x01,0x02,0x03,0x04,0x05,
-                      0x08,0x00};
-unsigned char real_ip_addr[]={0xa,0x00,0x00,0x64,0xa,0x0,0x0,0xa};
+    int i;
+    int len;
+    int p;
+    netTestHead_T * p_res;
+    Ti_Pkt * tip;
+    unsigned int templen;
+    int err;
+    char * p_pkt;
+    netTestHead_T * p_head;
+    netTestHead_T temp_head;
+    int tag_cmp=0;
+    unsigned int hash[4];
+    uint8_t *p_spi;
+    netTestSA_t *p_sa_info;
+
+#ifdef netTest_MULTI_THREAD
+    int coreid=Osal_nwalGetProcId();  //who we are(thread local)
+#else
+    int coreid=0;
 #endif
+    //nwal_AppId time;
+    unsigned long time, delta_time;
+    /* loop over received pkts */
+    for(i=0;i<n_pkts;i++)
+   {
+        tip = p_recv[i];
+        Pktlib_getDataBuffer(tip,(uint8_t**)&p_pkt,&templen);//ignore templen
+        len = Pktlib_getPacketLen(tip);//real length
+
+        /*p_sa_info is for rx context */
+        p_sa_info = (netTestSA_t*)meta[i].u.rx_sb_meta->appCtxId;
+        if (p_sa_info == NULL)
+        {
+            printf("recv_sb_cb(): trie_lookup failed\n");
+            continue;
+        }
+
+        //is this a decrypt (rx_tunnel) complete
+        if ((int)meta[i].u.rx_sb_meta->appId == p_sa_info->rx_tunnel)
+        {
+            //time = hplib_mUtilGetPmuCCNT();
+            //delta_time = time -(unsigned long) meta[i].u.rx_sb_meta->appCtxId;
+            stats[coreid].total_decrypt_time += delta_time;
+            stats[coreid].sb_rx+=1;
+            //copy hash out of meta data (for some reason it needs endian conversion)
+            hash[0]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[0]);
+            hash[1]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[1]);
+            hash[2]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[2]);
+            hash[3]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[3]);
+            if(stats[coreid].sb_rx<=16)
+            {
+                char *tp = (char *) &hash[0];
+                //netTest_utilDumpHeader((long*)p_pkt, stats[coreid].sb_rx, (int)meta[i].u.rx_sb_meta->appId,0);
+            }
+            tag_cmp = memcmp(&p_pkt[len-p_sa_info->auth_tag_size],(char*) &hash[0],p_sa_info->auth_tag_size); //todo, really use meta->authTagLen
+            stats[coreid].n_auth_ok += !(tag_cmp);
+            flip_and_send_pkt(tip, p_pkt, len,1, 0);  //flip packet to echo back and send
+        }
+        //this is an encrypt (tx tunnel) complete
+        else if((int)meta[i].u.rx_sb_meta->appId== p_sa_info->tx_tunnel )
+        {
+            hash[0]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[0]);
+            hash[1]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[1]);
+            hash[2]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[2]);
+            hash[3]= netTest_utilHtonl( meta[i].u.rx_sb_meta->pAuthTag[3]);
+            stats[coreid].sb_tx+=1;
+            if(stats[coreid].sb_tx<=16)
+            {
+                //netTest_utilDumpHeader((long*)p_pkt, stats[coreid].sb_tx, (int)meta[i].u.rx_sb_meta->appId,0);
+            }
+            //put the computed tag in the packet
+             memcpy(&p_pkt[len-p_sa_info->auth_tag_size],(char*)&hash[0],p_sa_info->auth_tag_size); //todo, really use meta->authTagLen
+            {
+                PKTIO_METADATA_T meta2 = {PKTIO_META_TX,{0},0};
+                nwalTxPktInfo_t meta_tx={0};
+                // now send directly 
+                meta2.sa_handle=nwal_HANDLE_INVALID;
+                meta_tx.txFlag1 = (NWAL_TX_FLAG1_DO_IPV4_CHKSUM| NWAL_TX_FLAG1_META_DATA_VALID);//only outer IP header checksum. no udp checksum possible since pkt is already encrypted
+                meta_tx.startOffset = 0;
+                meta_tx.ipOffBytes = netTest_MAC_HEADER_LEN;
+                meta_tx.l4OffBytes = 0;
+                meta_tx.l4HdrLen = 0;
+                meta_tx.ploadLen = 0;
+                time = hplib_mUtilGetPmuCCNT();
+                delta_time = time -(unsigned long) meta[i].u.rx_sb_meta->appCtxId;
+                stats[coreid].total_encrypt_time += delta_time;
+
+                /* post it to netcp tx channel*/
+                meta2.u.tx_meta=&meta_tx;
+                netapi_pktioSend(netcp_tx_chan_esp,tip,&meta2,&err);
+                hplib_cacheWbInv(p_pkt,len);
+                stats[coreid].tx +=1;
+            }
+        }
+        else printf("netapi recv_sb_cb: unknown appiD %x \n",meta[i].u.rx_sb_meta->appId );
+    }
+}
 
-#if 0  //goes with loopback
-unsigned char mac_header[]={0x00,0x01,0x02,0x03,0x04,0x05, 
-                      0x00,0x11,0x22,0x33,0x44,0x55,
-                      0x08,0x00};
+/**********************************************************************
+ * FUNCTION PURPOSE:  Packet receive Callback
+ *
+ **********************************************************************
+ * DESCRIPTION:   packet Receive callback
+ **********************************************************************/
+void recv_cb(struct PKTIO_HANDLE_Tag * channel, Ti_Pkt* p_recv[],
+                         PKTIO_METADATA_T meta[], int n_pkts,
+                         uint64_t ts )
+{
+    int i;
+    int len;
+    int p;
+    netTestHead_T * p_res;
+    Ti_Pkt * tip;
+    unsigned int templen;
+    int err = 0;
+    char * p_pkt;
+    netTestHead_T * p_head;
+    netTestHead_T temp_head;
+    netTestSA_t *p_sa_info;
+    uint8_t *p_spi;
+    uint8_t p_iv[16];
+    uint8_t p_add[8];
+    uint8_t p_add1[1500];
+    int16_t       retVal;
+
+    nwalGlobCxtInfo_t   nwalGlobCxt;
+    nwalLocCxtInfo_t    nwalLocCxt;
+
+    Cppi_HostDesc*          pPloadDesc;
+    int ifno;
+    uint16_t enet_port = 0;
+
+#ifdef netTest_MULTI_THREAD
+    int coreid=Osal_nwalGetProcId();  //who we are(thread local)
+#else
+    int coreid=0;
 #endif
-#define NE 65536 
-HEAD_T *nat;
-
-#define NP 5000
-int n_pkt = NP;
-STATS_T stats;
-
-Trie * P_trie;
-HEAD_T pkts[NP];
-#define PERSLOW  10  //% of pkts that will not be fastpath'd 
-int perslow= PERSLOW;
+    p_head=&temp_head;
 
-/*******************************************
- *************NETAPI OBJECTS***************
- *****************************************/
-Pktlib_HeapHandle OurHeap;
-PKTIO_HANDLE_T *our_chan;
-PKTIO_HANDLE_T *netcp_rx_chan;
-PKTIO_HANDLE_T *netcp_tx_chan;
-PKTIO_CFG_T our_chan_cfg={PKTIO_RW, PKTIO_LOCAL, PKTIO_Q_ANY, 8};
-PKTIO_CFG_T netcp_rx_cfg={PKTIO_R, PKTIO_NA, PKTIO_NA, 8};
-PKTIO_CFG_T netcp_tx_cfg={PKTIO_W, PKTIO_NA, PKTIO_NA, 8};
+    /* loop over received pkts */
+    for(i=0;i<n_pkts;i++)
+    {
+        ifno = ((unsigned int)meta[i].u.rx_meta->appId)&0xff;
+        
+        enet_port = meta[i].u.rx_meta->enetPort;
+        tip = p_recv[i];
+
+        Pktlib_getDataBuffer(tip,(uint8_t**)&p_pkt,&templen);/*ignore templen */
+        len = Pktlib_getPacketLen(tip)-4;   /*real length, subtract mac trailer */
+        Cppi_setData (Cppi_DescType_HOST, (Cppi_Desc *) tip, p_pkt,len);
+        Pktlib_setPacketLen(tip,len);
+
+        if(((unsigned int)meta[i].u.rx_meta->appId) == expPkt_appid)
+        {
+            netapi_Log("recv_cb: received exception packet\n");
+            Pktlib_freePacket(tip);
+            if(((unsigned int)meta[i].u.rx_meta->rxFlag1  & NWAL_RX_IP_FRAGMENT_PKT) ==
+                                             NWAL_RX_IP_FRAGMENT_PKT)
+            {
+                stats[coreid].exceptionPktsFrag+=1;
+            }
+            else
+            {
+                stats[coreid].exceptionPktsOther+=1;
+            }
+            continue;
+        }
+        //debug: validate descriptor */
+        if(Pktlib_getNextPacket(tip) != 0) 
+        {
+            printf(" rcv_cb, nexpkt != NULL");
+        }
+
+        if(coreid<TUNE_NETAPI_NUM_CORES)
+            stats[coreid].rx+=1;
+        if (ifno < TUNE_NETAPI_MAX_NUM_MAC)
+            stats[coreid].if_rx[ifno]+=1;
 
-void house(NETAPI_SCHED_HANDLE_T *s);
-NETAPI_T netapi_handle;
-NETAPI_SCHED_HANDLE_T * our_sched;
-NETAPI_SCHED_CONFIG_T our_sched_cfg={
-  NETAPI_SCHED_DURATION|NETAPI_SCHED_CBV, 0, house, 50  //every 50 poll loops
-};
-void our_stats_cb(NETAPI_T h, paSysStats_t* pPaStats);
-NETAPI_TIMER_GROUP_HANDLE_T ourTimerBlock; 
-NETAPI_TIMER_T t1;
-NETAPI_TIMER_T t2;
-NETAPI_TIMER_T t3;
-
-void our_timer_cb( NETAPI_TIMER_GROUP_HANDLE_T th,
-        int n_fired,     //# timers fired
-        NETAPI_TIMER_LIST_T fired_list,
-        uint64_t currentTime);
-
-/*************************END NETAPI OBJECTS***********************/
-
-#define START_SRC_IP 0x0a00000a
-#define DST_IP       0xc0a80001
-#define NEW_START_SRC_IP 0x9eda000a
-#define DST_PORT 0x555 
-#define START_SRC_PORT 0x1234
-#define NEW_START_SRC_PORT 100
-void update_header(HEAD_T * p_head, int len)
-{
-   unsigned char *p = (unsigned char *) &p_head->udp[1];
-   len -= (20+14);
-   /* update ip checksum */
-   /* update udp checksum */
-   /* update length */
-   *p= (len&0xff00)>>8;
-   *(p+1) = len&0xff;
-}
 
-void gen_pkts(int np)
-{
-int i;
-int ip = START_SRC_IP &0xff;
-int port= START_SRC_PORT;
-HEAD_T temp={{0x25000200,0xdead0000,0x80110000,START_SRC_IP,DST_IP},
-             {START_SRC_PORT<<16|DST_PORT,0x01ec<<16|0x0000}};
-/* endian convert header */
-temp.ip[0]=htonl(temp.ip[0]);
-temp.ip[1]=htonl(temp.ip[1]);
-temp.ip[2]=htonl(temp.ip[2]);
-temp.ip[3]=htonl(temp.ip[3]);
-temp.ip[4]=htonl(temp.ip[4]);
-temp.udp[0]=htonl(temp.udp[0]);
-temp.udp[1]=htonl(temp.udp[1]);
-
-for(i=0;(i<np) && (i<NP);i++)
-  {
-       memcpy(&pkts[i],&temp,sizeof(temp));
-       update_header(&pkts[i],512);      /* update checksums etc */
-       /* change template for new pkt */
-       ip+=1;
-       if(ip>254) {(ip=START_SRC_IP&0xff); port+=1; }
-       temp.ip[3] = htonl((START_SRC_IP&0xffffff00)| ip);
-       temp.udp[0] = htonl( (temp.udp[0]&0xffff0000)| port);
-       temp.udp[1] = htonl(temp.udp[1]);
-     
-  }
-  n_pkt=np;
-}
-void build_table(Trie * p_trie)
-{
-int i;
-int sip=NEW_START_SRC_IP&0xff;
-int sport=NEW_START_SRC_PORT; 
-HEAD_T temp;
-KEY_T key;
-int skip;
-int nskip=0;
-for(i=0;(i<n_pkt) && (i<NE);i++)
-{
-   skip = rand()%100;
-   if (skip<perslow) {nskip++;continue;}
-   memcpy(&temp,&pkts[i],sizeof(temp));
-   temp.ip[3]=htonl(((NEW_START_SRC_IP)&(0xffffff00))|(sip));
-   temp.udp[0] = htonl((temp.udp[0]&0xffff)| (sport<<16));
-   memcpy(&nat[i], &temp, sizeof(temp));
-
-   //insert entry
-   key.src_ip = pkts[i].ip[3];
-   key.dst_ip = pkts[i].ip[4];
-   key.src_port= (pkts[i].udp[0]&0xffff0000)>>16;
-   key.dst_port= (pkts[i].udp[0]&0x0000ffff);
-   trie_insert(p_trie,(char *)&key,sizeof(key), (void *) &nat[i]);
-   /* update */
-  sport+= 1;
-  if (sport > 60000) { sport = NEW_START_SRC_PORT; sip+=1; }
-}
- //printf("build tab: %d %d\n", n_pkt , nskip);
+#ifdef DEBUG_DESC
+        if (stats[coreid].rx<16)
+        {
+            netapi_Log(">rx dmp.."); 
+            netTest_utilDumpDescr((long *) tip, stats[coreid].rx);
+        }
+        else if (stats[coreid].rx>99) 
+        {
+            netapi_Log(">rx dmp.."); 
+            netTest_utilDumpDescr((long *) tip,stats[coreid].rx);
+        }
+#endif
+#if 0
+        //
+        if(stats[coreid].rx<=16)
+        {
+            netTest_utilDumpHeader((long*)p_pkt,stats[coreid].rx, (int)meta[i].u.rx_meta->appId,meta[i].u.rx_meta->rxFlag1);
+            netTest_utilDumpBuffer((long*)p_pkt,len);
+        }
+#endif
+        /* check header */
+        memcpy(p_head,&p_pkt[netTest_MAC_HEADER_LEN],sizeof(netTestHead_T));
+
+        /* check for IPSEC ESP or AH packet, 0x32 is ESP tunnel mode, 0x33 is AH tunnel mode*/
+        if (((p_head->ip[2]&0x0000ff00)==0x00003200) || ((p_head->ip[2]&0x0000ff00)==0x00003300))
+        {
+            if (!netTest_utilCheckHeader(p_head,&meta[i]))
+            {
+                printf("recv_cb: error in ipsec pkt\n");
+                stats[coreid].n_bad+=1;Pktlib_freePacket(tip); 
+                continue;
+            }
+
+            //process IP SEC PACKET
+            if (netTestCfg.ipsec_mode_rx == IPSEC_MODE_RX_SIDEBAND)
+            {
+                p_spi = &(p_pkt[netTest_MAC_HEADER_LEN+netTest_IP_HEADER_LEN]);
+                p_sa_info = (netTestSA_t *) trie_lookup(p_trie_sa_rx, (char *)p_spi ,4);
+                if (p_sa_info == NULL)
+                {
+                    printf("recv_cb(): trie_lookup() failed\n");
+                    continue;
+                }
+
+                //ship to crypto for decrypt!!
+                //12 byte auth tag
+                PKTIO_METADATA_T meta2 = {PKTIO_META_SB_TX,{0},0};
+                nwalDmTxPayloadInfo_t meta_tx={0};
+
+                meta2.sa_handle = (void*) p_sa_info->rx_tunnel;
+
+                memcpy(&meta_tx, &(p_sa_info->tx_payload_info), sizeof(nwalDmTxPayloadInfo_t));
+
+                meta_tx.encSize = len - p_sa_info->tx_payload_info.encOffset -p_sa_info->auth_tag_size;
+                meta_tx.authSize = len - meta_tx.authOffset - p_sa_info->auth_tag_size;
+
+                if (p_sa_info->cipherMode == NWAL_SA_EALG_AES_CTR)
+                {
+                    memcpy(&p_iv[0], &p_sa_info->key_params->pEncKey[16], 4);
+                    memcpy(&p_iv[4], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                    p_iv[12] = 0;
+                    p_iv[13] = 0;
+                    p_iv[14] = 0;
+                    p_iv[15] = 1;
+                    meta_tx.pEncIV = &p_iv[0];
+                 
+                }
+                else if ((p_sa_info->cipherMode == NWAL_SA_EALG_AES_GCM) ||
+                            (p_sa_info->cipherMode == NWAL_SA_EALG_AES_CCM))
+                {
+                        memcpy(&p_iv[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                        meta_tx.pEncIV = &p_iv[0];
+                        /* aad is the ESP header which is 8 bytes */
+                        memcpy(&p_add[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN], 8);
+                        meta_tx.pAad= &p_add[0];
+                        meta_tx.aadSize = 8;
+                }
+                else if (p_sa_info->authMode == NWAL_SA_AALG_GMAC)
+                {
+                    memcpy(&p_iv[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN], 8);
+                        meta_tx.pAuthIV= &p_iv[0];
+                        /* aad is the ESP header which is 8 bytes */
+                        memcpy(&p_add[0], &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN], 8);
+                        meta_tx.pAad= &p_add[0];
+                        meta_tx.aadSize = 8;
+                }
+                else if (p_sa_info->cipherMode ==  NWAL_SA_EALG_NULL)
+                {
+                    meta_tx.pEncIV = NULL;
+                }
+                else
+                {
+                    meta_tx.pEncIV = &p_pkt[netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN + netTest_ESP_HEADER_LEN ];
+                }
+               
+                meta_tx.appCtxId = (nwal_AppId)p_sa_info;
+
+                /* post it to netcp sb tx channel*/
+                meta2.u.tx_sb_meta=&meta_tx;
+
+                netapi_pktioSend(netcp_sb_tx_chan,tip,&meta2,&err);
+                continue;
+            }
+            else
+            {
+                //inflow mode.  flip and send
+                flip_and_send_pkt(tip,p_pkt,len,1, enet_port);
+            }
+        }
+        /* check for udp protocol */
+        else if ((p_head->ip[2]&0x0000ff00)!=0x00001100)
+         //else if ((p_head->ip[2]&0x00ff0000)!=0x00110000)
+        {
+            stats[coreid].n_new+=1;Pktlib_freePacket(tip); continue;
+        }
+        else  //non ipsec
+        {
+            if (!netTest_utilCheckHeader(p_head,&meta[i]))
+            {
+                stats[coreid].n_bad+=1;Pktlib_freePacket(tip); 
+                continue;
+            }
+            //just flip and send
+            flip_and_send_pkt(tip,p_pkt,len,0, enet_port);
+        }
+    }
 }
 
-//===========stub transmitter==================
-void send_pkt(Ti_Pkt *pkt, int len)
+/* Templates to build command labels at startup up time, required by open_pktio_tx_channels() */
+nwalTxPktInfo_t txPktInfoESP = 
 {
-Pktlib_freePacket((Ti_Pkt*)pkt);
-       return;
-}
+    NULL,                                                                                               /* p_pkt */
+    NWAL_TX_FLAG1_DO_IPSEC_ESP_CRYPTO| NWAL_TX_FLAG1_DO_UDP_CHKSUM| NWAL_TX_FLAG1_META_DATA_VALID,      /* txFlags */
+    0,                                                                                                  /* lpbackPass */
+    0,                                                                                                  /* enetport */
+    0,                                                                                                  /* msuSize */
+    0,                                                                                                   /* startOffset */
+    netTest_MAC_HEADER_LEN  + netTest_IP_HEADER_LEN,                                                    /* saOffBytes */
+    0,                                                                                                  /* saPayLoadLen */
+    0               ,                                                                                    /* saAhIcvOffBytes */
+    0,                                                                                                 /* saAhMacSize */
+    0,                                                                                                  /* etherLenOffBytes */
+    0,                                                                                                  /* ipOffBytes */
+    0,                                                                                                  /* l4OffBytes */
+    netTest_UDP_HEADER_LEN,                                                                             /* l4HdrLen */
+    0,                                                                                                  /* pseudoHdrChecksum */
+    0                                                                                                   /* pLoadLen */
+};
 
 
-void slow_path(Ti_Pkt *pkt, int len)
+nwalTxPktInfo_t txPktInfoAH = 
 {
+    NULL,                                                                                               /* p_pkt */
+    NWAL_TX_FLAG1_DO_IPSEC_AH_CRYPTO| NWAL_TX_FLAG1_DO_UDP_CHKSUM | NWAL_TX_FLAG1_META_DATA_VALID,      /* txFlags */
+    0,                                                                                                  /* lpbackPass */
+    0,                                                                                                  /* enetport */
+    0,                                                                                                  /* msuSize */
+    0,                                                                                                   /* startOffset */
+    netTest_MAC_HEADER_LEN  + netTest_IP_HEADER_LEN,                                                    /* saOffBytes */
+    0,                                                                                                  /* saPayLoadLen */
+    netTest_MAC_HEADER_LEN + netTest_IP_HEADER_LEN + netTest_IPSEC_AH_FIXED_HDR_SIZE,                    /* saAhIcvOffBytes */
+    12,                                                                                                 /* saAhMacSize */
+    0,                                                                                                  /* etherLenOffBytes */
+    0,                                             /* ipOffBytes */
+    0,                                                                                                  /* l4OffBytes */
+    netTest_UDP_HEADER_LEN,                                                                            /* l4HdrLen */
+    0,                                                                                                  /* pseudoHdrChecksum */
+    0                                                                                                   /* pLoadLen */
+};
 
-         {Ti_Pkt * k= Pktlib_getNextPacket(pkt); if(k != 0) {printf(" slowpath, nexpkt != NULL");}}
-Pktlib_freePacket((Ti_Pkt*)pkt);
-       return;
-}
-/* check header */
-int check_header(HEAD_T * p_head)
+nwalTxPktInfo_t txPktInfoNoCrypto = 
 {
- /* check version */
- /* ip check sum */
- /* udp check sum */
- return 1;
-}
+    NULL,                                                                                               /* p_pkt */
+    NWAL_TX_FLAG1_DO_UDP_CHKSUM| NWAL_TX_FLAG1_META_DATA_VALID,      /* txFlags */
+    0,                                                                                                  /* lpbackPass */
+    0,                                                                                                  /* enetport */
+    0,                                                                                                  /* msuSize */
+    0,                                                                                                   /* startOffset */
+    0,                                                    /* saOffBytes */
+    0,                                                                                                  /* saPayLoadLen */
+    0               ,                                                                                    /* saAhIcvOffBytes */
+    0,                                                                                                 /* saAhMacSize */
+    0,                                                                                                  /* etherLenOffBytes */
+    0,                                                                                                  /* ipOffBytes */
+    netTest_MAC_HEADER_LEN +netTest_IP_HEADER_LEN,                                        /* l4OffBytes */
+    netTest_UDP_HEADER_LEN,                                                             /* l4HdrLen */
+    0,                                                                         /* pseudoHdrChecksum */
+    0                                                                                                   /* pLoadLen */
+};
 
-#define PKT_LEN 1400
-void test_alloc_free(int n)
-{
-int i;
-Ti_Pkt * b;
 
-for(i=0;i<n;i++)
+void close_pktio_channels(void)
 {
-  b=Pktlib_allocPacket(OurHeap,PKT_LEN);
-  Pktlib_freePacket(b);
-}
+    int err;
+    netapi_pktioClose(netcp_tx_chan_esp ,&err);
+    netapi_pktioClose(netcp_tx_chan_ah ,&err);
+    netapi_pktioClose(netcp_sb_tx_chan ,&err);
+    netapi_pktioClose(netcp_tx_chan_no_crypto,&err);
 }
-/*-----------test driver: gen an input pkt------- */
-//char buffer[sizeof(HEAD_T)+PKT_LEN];
-Ti_Pkt * get_pkt(int n, unsigned int *p_len)
-{
-   int ind;
-   long long temp;
-   Ti_Pkt * b;
-   char * buffer;
-   unsigned int len;
-
-  if (pktloopback==0)
-  {
-       if (n>=4) return NULL;   //just gen pkts to warm swtich, so that it knows
-                                //our mac is valid
-  }  
-  b=Pktlib_allocPacket(OurHeap,PKT_LEN);
-  if (!b) 
-    {printf("net_test: get_pkt() heap empty!! %d pkts gen'd %d \n", n); return NULL;};
-
-   //debug
-   //printf("pkt= %x %x\n", b, Pktlib_getNextPacket(b));
 
-#if 0
-/*temp patch - should move inside nwal **/
+void open_pktio_tx_channels(void)
 {
-Cppi_Desc * pHdrDesc = Pktlib_getDescFromPacket(b);
+    int err;
+    /* open netcp default  TX for ESP packets */
+    netcp_tx_chan_esp= netapi_pktioOpen(netapi_handle, NETCP_TX, NULL, &netcp_tx_cfg,  &err);
+    if (!netcp_tx_chan_esp)
+    {
+        printf("pktio open TX failed err=%d\n",err);
+        exit(1);
+    }
+    else
+    {
+        if(netTestCfg.ipsec_mode_tx == IPSEC_MODE_TX_INFLOW)
+        {
+            PKTIO_CONTROL_T control;
+            control.op = PKTIO_UPDATE_FAST_PATH;
+            PKTIO_CFG_T cfg;
+            cfg.fast_path_cfg.fp_send_option = PKTIO_FP_ESP_L4CKSUM_PORT;
+            cfg.fast_path_cfg.txPktInfo= &txPktInfoESP;
+            netapi_pktioControl(netcp_tx_chan_esp, NULL, &cfg, &control, &err);
+        }
+    }
 
-/* Initialize the PS for no control info.  */
-Cppi_setPSLen (Cppi_DescType_HOST, (Cppi_Desc *)pHdrDesc, 0);
-}
-#endif
+    /*/* open netcp default  TX for AH packets */
+    netcp_tx_chan_ah= netapi_pktioOpen(netapi_handle, NETCP_TX, NULL, &netcp_tx_cfg,  &err);
+    if (!netcp_tx_chan_ah)
+    {
+        printf("pktio open TX failed err=%d\n",err);
+        exit(1);
+    }
+    else
+    {
+        if(netTestCfg.ipsec_mode_tx == IPSEC_MODE_TX_INFLOW)
+        {
+            PKTIO_CONTROL_T control;
+            control.op = PKTIO_UPDATE_FAST_PATH;
+            PKTIO_CFG_T cfg;
+            cfg.fast_path_cfg.fp_send_option = PKTIO_FP_AH_L4CKSUM_PORT;
+            cfg.fast_path_cfg.txPktInfo= &txPktInfoAH;
+            netapi_pktioControl(netcp_tx_chan_ah, NULL, &cfg, &control, &err);
+        }
+    }
 
-    //debug - way to validate descriptor
-    {Ti_Pkt* k= Pktlib_getNextPacket(b); 
-         if(k != 0) {printf(" genpkt, nexpkt != NULL");}}
+    /* open netcp default  TX channels for non-Crypto packets */
+    netcp_tx_chan_no_crypto= netapi_pktioOpen(netapi_handle, NETCP_TX, NULL, &netcp_tx_cfg,  &err);
+    if (!netcp_tx_chan_no_crypto)
+    {
+        printf("pktio open TX failed err=%d\n",err);
+        exit(1);
+    }
+    else
+    {
+        if(netTestCfg.ipsec_mode_tx == IPSEC_MODE_TX_INFLOW)
+        {
+            PKTIO_CONTROL_T control;
+            control.op = PKTIO_UPDATE_FAST_PATH;
+            PKTIO_CFG_T cfg;
+            cfg.fast_path_cfg.fp_send_option = PKTIO_FP_L4CKSUM_PORT;
+            cfg.fast_path_cfg.txPktInfo= &txPktInfoNoCrypto;
+            netapi_pktioControl(netcp_tx_chan_no_crypto, NULL, &cfg, &control, &err);
+        }
+    }
 
+    /* open netcp default  TX channels for SB crypto */
+    netcp_sb_tx_chan= netapi_pktioOpen(netapi_handle, NETCP_SB_TX, NULL, &netcp_sb_tx_cfg,  &err);
+    if (!netcp_sb_tx_chan)
+    {
+        printf("pktio open SB TX failed err=%d\n",err);
+        exit(1);
+    }
+}
 
-   //get pointer to buffer area of packet
-   Pktlib_getDataBuffer(b,(uint8_t**)&buffer,&len);
+#ifdef netTest_DSP_FASTPATH
+void setup_netTestDSPFastPath(NETAPI_T handle)
 
-#if 0 
-if (pktloopback==0)
 {
-   temp = (long long) rand();
-   temp *= PKT_LEN;
-   temp /= RAND_MAX;
-   temp +=2;
-   *p_len = (int) temp; 
-   *p_len = *p_len &0xfffffffe;
-   temp = (long long) rand();
-   temp *= n_pkt;
-   temp /= RAND_MAX;
-   ind = (int) temp;
-   update_header(&pkts[ind],*p_len);
-   //printf("get pkt:%d %d ind=%d len=%d\n",RAND_MAX, rand(),ind, *p_len);
-    memcpy(&buffer[0], &mac_header[0],14);
-    memcpy(&buffer[14],(char*)&pkts[ind],sizeof(HEAD_T)); 
+    int i;
+    int err = 0;
+    PKTIO_CFG_T dsp_pktio_cfg;
+    NETCP_CFG_CLASSIFIER_T dsp_classi;
+    NETCP_CFG_ROUTE_T dsp_route;
+
+    memset(&dsp_pktio_cfg, 0, sizeof (PKTIO_CFG_T));
+    memset(&dsp_classi, 0, sizeof (NETCP_CFG_CLASSIFIER_T));
+    memset(&dsp_route, 0, sizeof (NETCP_CFG_ROUTE_T));
+    char dsp_name[32];
+    //for (i = 0; i < CPU_NUM_REM_FAST_PATH_CORES; i++)
+    for (i = 0; i < 1; i++)
+    {
+        sprintf(&dsp_name[0],"%s%d","dsp_chan", i);
+        printf("netTest_utilCreateInterfaces: %s\n",&dsp_name[0]);
+
+        dsp_pktio_cfg.flags1 = PKTIO_RX;
+        dsp_pktio_cfg.flags2 = PKTIO_GLOBAL | PKTIO_PKT;
+        dsp_pktio_cfg.qnum = TEST_NWAL_BASE_REM_FP_RX_PKT_QUEUE + i;
+        dsp_pktio_cfg.max_n = 8;
+
+        /* pktio channels created here will NOT be POLLED by net_test arm application */
+        dsp_pktio_channels[i] = netapi_pktioCreate(handle,
+                                               &dsp_name[0],
+                                               (PKTIO_CB)recv_cb,
+                                               &dsp_pktio_cfg,
+                                               &err);
+        if (dsp_pktio_channels[i])
+        {
+            printf("setup_netTestDSPFastPath: sucess for core %d\n", i);
+        }
+        else
+        {
+            printf("setup_netTestDSPFastPath: failed for core %d\n", i);
+        }
+
+        dsp_classi.classType =NETCP_CFG_CLASS_TYPE_L4;
+        dsp_classi.u.c_l4.iface = netTestCfg.dsp_mac;
+        
+        dsp_classi.u.c_l4.ip = ip_rule[netTestCfg.dsp_ip];
+        dsp_classi.u.c_l4.proto = NWAL_APP_PLOAD_PROTO_UDP;
+        dsp_classi.u.c_l4.appProto.udpPort = TEST_NWAL_BASE_REM_FP_UDP_PORT + i;
+
+        dsp_route.p_dest_q = dsp_pktio_channels[i];
+       
+        dsp_route.p_flow = (NETCP_CFG_FLOW_T*)NETCP_DEFAULT_FLOW;
+        
+        
+        dsp_classifers[i] = netapi_netcpCfgAddClass(handle, 
+                                &dsp_classi, 
+                                (NETCP_CFG_ROUTE_HANDLE_T) &dsp_route, 
+                                NETCP_CFG_ACTION_TO_SW,
+                                NULL,
+                                &err);
+
+        if (err == NETAPI_ERR_OK)
+        {
+            printf("setup_netTestDSPFastPath: netapi_netcpCfgAddClass sucess for core %d\n", i);
+        }
+        else
+        {
+            printf("setup_netTestDSPFastPath: netapi_netcpCfgAddClass failed for core %d\n", i);
+        }
+    }
 }
-else
-#endif
 
-   //copy test packet into buffer
+void teardown_netTestDSPFastPath()
 {
-    memcpy(&buffer[0], &testPkt[0],TEST_PKT_LEN);
-    *p_len = TEST_PKT_LEN;
-}
-    return b; 
+    int i;
+    int err=0;
+
+    for (i = 0; i < CPU_NUM_REM_FAST_PATH_CORES; i++)
+    {
+        netapi_netcpCfgDelClass(netapi_handle,
+                                dsp_classifers[i],
+                                &err);
+        if (err == NETAPI_ERR_OK)
+        {
+            printf("teardown_netTestDSPFastPath: netapi_netcpCfgDelClass sucess for core %d\n", i);
+        }
+        else
+        {
+            printf("teardown_netTestDSPFastPath: netapi_netcpCfgDelClass failed for core %d\n", i);
+        }
+
+        netapi_pktioDelete(dsp_pktio_channels[i],
+                           &err);
+        if (err == NETAPI_ERR_OK)
+        {
+            printf("teardown_netTestDSPFastPath: netapi_pktioDelete sucess for core %d\n", i);
+        }
+        else
+        {
+            printf("teardown_netTestDSPFastPath: netapi_pktioDelete failed for core %d\n", i);
+        }
+    }
 }
+#endif
 
 
-/******************************************************/
-/******************PKT RECEIVE HANDLER *************************/
-/******************************************************/
-void recv_cb(struct PKTIO_HANDLE_Tag * channel, Ti_Pkt* p_recv[],
-                         PKTIO_METADATA_T meta[], int n_pkts,
-                         uint64_t ts )
+#ifdef netTest_MULTI_THREAD
+NETAPI_T worker_nh[TUNE_NETAPI_NUM_CORES];
+
+void slow_path_thread(uint32_t index)
 {
-int i;
-int len;
-int p;
-HEAD_T * p_res;
-Ti_Pkt * tip;
-unsigned int templen;
-int err;
-KEY_T key;
-char * p_pkt;
-HEAD_T * p_head;
-HEAD_T temp_head;
+    int err, i;;
+    uint32_t thread_num;
+    PKTIO_HANDLE_T *rx_chan;
+    PKTIO_HANDLE_T *sb_rx_chan;
 
-    p_head=&temp_head;
 
-    //debug
-#if 0
-    if (n_pkts != TX_BURST) {
-      printf("recv_cb, txsofar=%d rxsofar=%d  np = %d, NOT %d\n", 
-             stats.itx, stats.rx, n_pkts,TX_BURST);
-      our_stats_cb(netapi_handle,NULL);
+    cpu_set_t cpu_set;
+
+    thread_num = netTestCfg.sp_thread_num[index];
+    printf("slow_path_thread, mypid: %d, core_id %d\n", gettid(), netTestCfg.sp_thread_num[index]);
+
+    CPU_ZERO( &cpu_set);
+    printf("slow_path_thread: settting up for thread number %d\n", thread_num);
+#ifdef CORTEX_A15
+    for (i = netTestCfg.sp_proc_start[index]; i <= netTestCfg.sp_proc_end[index];i++)
+    {
+        printf("slow_path_thread: setting cpu %d to cpu_set\n", i);
+        CPU_SET( i, &cpu_set);
     }
+    hplib_utilSetupThread(thread_num, &cpu_set);
+#else
+    for (i = netTestCfg.sp_proc_start[index]; i <= netTestCfg.sp_proc_end[index];i++)
+    {
+        printf("slow_path_thread: setting cpu %d to cpu_set\n", i);
+        CPU_SET( i, &cpu_set);
+    }
+    hplib_utilSetupThread(thread_num, &cpu_set);
 #endif
-    //test_alloc_free(7);
-    //printf("recv start\n");
-
-   /* loop over received pkts */
-   for(i=0;i<n_pkts;i++)
-   {
-       tip = p_recv[i];
-       Pktlib_getDataBuffer(tip,(uint8_t**)&p_pkt,&templen);//ignore templen
-       len = Pktlib_getPacketLen(tip);//real length
+    worker_nh[thread_num]=netapi_init(NETAPI_CORE_MASTER,NULL);
 
-         //debug: validate descriptor */
-         if(Pktlib_getNextPacket(tip) != 0) {printf(" rcv_cb, nexpkt != NULL");}
-        //debug printf("recv pkt, len=%d %d\n", len, templen);
-       stats.rx+=1;
+    netapi_setCookie(worker_nh[thread_num],(void*)(thread_num | NET_TEST_SP_THREAD_MASK));
 
-#ifdef DEBUG_DESC
-   if (stats.rx<16){printf(">rx dmp.."); dump_descr((long *) tip, stats.rx);}
-   else if (stats.rx>99) {printf(">rx dmp.."); dump_descr((long *) tip,stats.rx);}
-#endif
+    scheduler[thread_num] =netapi_schedOpen(worker_nh[thread_num],&our_sched_cfg, &err);
+    if (!scheduler[thread_num]) 
+    {
+        printf("sched create failed for core%d\n",thread_num);
+        exit(1);
+    }
+    scheduler[thread_num]->config.yield = TRUE;
+    scheduler[thread_num]->config.pollGarbageQ = TRUE;
+    scheduler[thread_num]->config.pollCtrlQ = TRUE;
 
+    /* Entry point to scheduler */
+    netapi_schedRun(scheduler[thread_num], &err);
+    printf(">net_test: core %d worker thread done\n",thread_num);
 
-       /* check header */
-       memcpy(p_head,&p_pkt[14],sizeof(HEAD_T));
-       if (!check_header(p_head)) { 
-               stats.n_bad+=1;Pktlib_freePacket(tip); continue;
-       }
+    netapi_shutdown(worker_nh[thread_num]);
+}
 
-       /* lookup flow */
-       key.src_ip = p_head->ip[3];
-       key.dst_ip = p_head->ip[4];
-       key.src_port= (p_head->udp[0]&0xffff0000)>>16;
-       key.dst_port= (p_head->udp[0]&0x0000ffff);
-       p_res= (HEAD_T *) trie_lookup(P_trie, (char *) &key, sizeof(key));
-       if (!p_res) { stats.n_new+=1;  slow_path(tip, len); continue;}
+void fast_path_thread(uint32_t index)
+{
+    int err, i;
+    PKTIO_HANDLE_T *rx_chan;
+    PKTIO_HANDLE_T *sb_rx_chan;
+    uint32_t thread_num;
+
+
+    cpu_set_t cpu_set;
+
+    CPU_ZERO( &cpu_set);
+    printf("fast_path_thread: settting up for thread number %d\n", netTestCfg.fp_thread_num[index]);
+    thread_num = netTestCfg.fp_thread_num[index];
+#ifdef CORTEX_A15
+    for (i = netTestCfg.fp_proc_start[index]; i <= netTestCfg.fp_proc_end[index];i++)
+    {
+        printf("fast_path_thread: start core %d, end core %d\n",
+                netTestCfg.fp_proc_start[index],
+                netTestCfg.fp_proc_end[index]);
+        printf("fast_path_thread: setting cpu %d to cpu_set\n", i);
+        CPU_SET( i, &cpu_set);
+    }
+    hplib_utilSetupThread(thread_num, &cpu_set);
+#else
+    for (i = netTestCfg.fp_proc_start[index]; i <= netTestCfg.fp_proc_end[index];i++)
+    {
+        printf("fast_path_thread: setting cpu %d to cpu_set\n", i);
+        CPU_SET( i, &cpu_set);
+    }
+    hplib_utilSetupThread(thread_num, &cpu_set);
+#endif
+    worker_nh[thread_num]=netapi_init(NETAPI_CORE_MASTER,NULL);
+
+   /* open netcp default RX channels*/
+    rx_chan = netapi_pktioOpen(worker_nh[thread_num], NETCP_RX, (PKTIO_CB) recv_cb, &netcp_rx_cfg,  &err);
+
+    /* create a pktio channel for specially classified pkts */
+    /* open netcp default tx, rx queues for sideband crypto */
+     //sb_tx_chan = netapi_pktioOpen(worker_nh[thread_num], NETCP_SB_TX, NULL, &netcp_sb_tx_cfg,  &err);
+     sb_rx_chan = netapi_pktioOpen(worker_nh[thread_num], NETCP_SB_RX, (PKTIO_CB) recv_sb_cb, &netcp_sb_rx_cfg,  &err);
+
+    netapi_setCookie(worker_nh[thread_num],(void*)thread_num);
+    
+    scheduler[thread_num] =netapi_schedOpen(worker_nh[thread_num],&our_sched_cfg, &err);
+    if (!scheduler[thread_num]) 
+        {
+        printf("sched create failed for core%d\n",thread_num); 
+        exit(1);
+    }
 
-       /* copy header */
-       memcpy((char *) p_head, (char *) p_res, sizeof(HEAD_T));
+    scheduler[thread_num]->config.yield = FALSE;
+    scheduler[thread_num]->config.pollGarbageQ = FALSE;
+    scheduler[thread_num]->config.pollCtrlQ = FALSE;
+     //sleep(100000);
+   /* Entry point to scheduler */
+     netapi_schedRun(scheduler[thread_num], &err);
+    printf(">net_test: core %d worker thread done\n",thread_num);
 
-       /* update checksums */
-       //update_header(p_head,len);
-       memcpy(&p_pkt[14],p_head,sizeof(HEAD_T));
-        /* update_mac(&p_pkt[0]);  */
+    netapi_pktioClose(rx_chan, &err);
 
-       /* send pkt */
-       send_pkt(tip,len);
-       stats.tx+=1;
-    }
-    //printf("recv done\n");
+    netapi_pktioClose(sb_rx_chan, &err);
+    netapi_shutdown(worker_nh[thread_num]);
 }
 
-//timer callback 
-void our_timer_cb( NETAPI_TIMER_GROUP_HANDLE_T th,
-        int n_fired,     //# timers fired
-        NETAPI_TIMER_LIST_T fired_list,
-        uint64_t currentTime)
-{
-int i;
-NETAPI_TIMER_T tx;
-int cookie;
-int err;
-unsigned long long et;
-printf("TIMER CALLBACK @ %lld %d timers\n", currentTime, n_fired);
-tx = netapi_TimerGetFirst(fired_list);
-for(i=0;i<n_fired;i++)
+#endif
+/***************************************
+ ********** test driver*****************
+ ***************************************/
+int main(int argc, char **argv)
 {
-  cookie = (int) netapi_TimerGetCookie(tx);
-  et =  netapi_TimerGetTs(tx); //debug
-  printf("   timer %d - cookie = %d expected ts=%lld (delta=%lld)\n", i, cookie, et, currentTime-et);
-  if (cookie ==1)
-     t1 = netapi_TimerGroupStartTimer(
-        th,
-        (void *) 1,
-        100LL,  //timer group tics
-        &err);
-  else if (cookie ==2)
-      t2 = netapi_TimerGroupStartTimer(
-        th,
-        (void *) 2,
-        200LL,  //timer group ticks
-        &err);
-  else
-  {
-    t3 = netapi_TimerGroupStartTimer(
-        th,
-        (void *) 3,
-        300LL,  //timer group ticks
-        &err);
-    //cancel 1 and restart 1
-   netapi_TimerGroupCancel(th,t1,&err);
-   t1 = netapi_TimerGroupStartTimer(
-        th,
-        (void *) 1,
-        100LL,  //timer group ticks
-        &err);
-
-
- }
-
-
-  tx = netapi_TimerGetNext(fired_list,tx); 
-}
-}
+    int err,i;
+    Pktlib_HeapCfg      heapCfg;
+    int32_t             errCode;
+    Pktlib_HeapIfTable*  pPktifTable;
+    FILE * fpr = NULL;
+
+#ifdef netTest_MULTI_THREAD
+    cpu_set_t cpu_set;
+#endif
+     /* install signal handler for ^c */
+    signal(SIGINT,netTest_utilMySig);
 
+    if (argc == 2)
+    {
+        printf("main: filename1 %s\n", argv[1]);
+        fpr = fopen(argv[1], "r");
+    }
+    else
+    {
+        fpr = fopen(input_file_name, "r");
+    }
+    if (fpr == NULL)
+    {
+       printf("Cant open config file: filepath %s, %s\n", input_file_name, strerror(errno));
+        exit(1);
+    }
+    else
+    {
+        memset(&config_file, 0, sizeof(netTestConfigFile_t));
+        memset(&netTestCfg, 0, sizeof(netTestConfig_t));
+        
+        netTest_utilProcessConfigFile(fpr,&config_file);
 
-static int np2process = NP;
-/******************************************************
- * stats callback
- *******************************************************/
-void our_stats_cb(NETAPI_T h, paSysStats_t* pPaStats)
-{
-uint32_t numFreeDataPackets;
-uint32_t numZeroBufferPackets;
-uint32_t numPacketsinGarbage;
+        netTest_utilParseMac(&config_file);
 
-printf("stats @ %lld\n", netapi_getTimestamp());
-if(pPaStats)
-{
-       printf("C1 number of packets:           %d\n", pPaStats->classify1.nPackets);
-       printf("C1 number IPv4 packets:         %d\n", pPaStats->classify1.nIpv4Packets);
-       //printf("C1 number llc/snap fail:        %d\n", pPaStats->classify1.nLlcSnapFail);
-       printf("C1 number table matched:        %d\n", pPaStats->classify1.nTableMatch);
-       printf("C1 number failed table matched: %d\n", pPaStats->classify1.nNoTableMatch);
-       printf ("C1 number of parse fail:        %d\n",pPaStats->classify1.nParseFail);
-       printf("C1 number of command failures:  %d\n", pPaStats->classify1.nCommandFail);
-       printf("C1 number invalid reply dests:  %d\n", pPaStats->classify1.nInvalidComReplyDest);
-       printf ("C1 number of silent discard:    %d\n",pPaStats->classify1.nSilentDiscard);
-       printf("C1 number of invalid control:   %d\n", pPaStats->classify1.nInvalidControl);
-       printf ("C1 number of invalid states:    %d\n",pPaStats->classify1.nInvalidState);
-       printf ("C1 number of system fails:      %d\n",pPaStats->classify1.nSystemFail);
-       printf ("C2 number parse failed  :      %d\n",pPaStats->classify2.nParseFail);
-       printf ("C2 number Invld Header  :      %d\n",pPaStats->classify2.nInvldHdr);
-       printf ("C2 number udp           :      %d\n",pPaStats->classify2.nUdp);
-       printf ("C2 number tcp           :      %d\n",pPaStats->classify2.nTcp);
-       printf ("C2 number cmd fail      :      %d\n",pPaStats->classify2.nCommandFail);
-       printf ("C2 number silent drop   :      %d\n",pPaStats->classify2.nSilentDiscard);
-       printf ("C2 number invalid cntrl :      %d\n\n",pPaStats->classify2.nInvalidControl);
-}
-Pktlib_getHeapStats(OurHeap, &numFreeDataPackets,
-                             &numZeroBufferPackets, &numPacketsinGarbage);
-printf("heap stats>  #free=%d #zb=%d #garbage=%d\n", numFreeDataPackets,
-                                numZeroBufferPackets, numPacketsinGarbage);
-//debug
-dump_poll_stats();
+        /* parse slow path/fast path thread configuration parameters */
+        netTest_utilParseThreadParams(&config_file);
 
+        netTest_utilParseIP(&config_file);
 
-}
+        netTest_utilParseIpsecMode(&config_file);
 
-//******************************************************
-//use scheduling housekeeping callback to generate pkts
-//******************************************************
-void house(NETAPI_SCHED_HANDLE_T * s)
-{
-Ti_Pkt * tip;
-unsigned int len;
-nwalTxPktInfo_t meta_tx={0};
-PKTIO_METADATA_T meta = {PKTIO_META_TX,0};
-int err;
-static int house_pkts_gened=0;
-int p;
-unsigned char * pIpHdr,* pData;
-
-for(p=0;p<TX_BURST;p++) {  
-//reguest stats 
-if ((house_pkts_gened>0) && (! (house_pkts_gened%400)) )
-{
-   printf("net_test> request stats at n=%d \n",house_pkts_gened);
-   netcp_cfgReqStats(netapi_handle, our_stats_cb, 0,&err); 
-   if (err!=0) {printf("stats req failed\n");}
-}
+        /* DSP mac processing */
+        parse_dsp_mac(&config_file.dsp_mac[0]);
 
+       /* DSP IP processing */
+        parse_dsp_ip(&config_file.dsp_ip[0]);
 
-  if (house_pkts_gened >= np2process+ 100)
-  {
-     //shutdown
-     netapi_schedShutdown(s,NULL,&err);
-     continue;
-  }
-
-  else if (house_pkts_gened >= np2process) { house_pkts_gened+=1;  continue;}
-  
-
-/* manufacture a pkt to transmit */
-   tip = get_pkt(house_pkts_gened, &len);
-   if(!tip) { house_pkts_gened +=1; continue; }
-
-   /* set the pkt length */
-   Pktlib_setPacketLen(tip, len);
-
-   /* set up meta data */
-    meta_tx.txFlag1 = (NWAL_TX_FLAG1_DO_IPV4_CHKSUM | NWAL_TX_FLAG1_DO_UDP_CHKSUM);
-    meta_tx.startOffset = 0;
-    meta_tx.pktLen = len;
-    meta_tx.ipOffBytes = TEST_PKT_IP_OFFSET_BYTES;
-    meta_tx.l4OffBytes = TEST_PKT_UDP_OFFSET_BYTES;
-    meta_tx.l4HdrLen = TEST_PKT_UDP_HDR_LEN;
-    meta_tx.ploadOffBytes = TEST_PKT_PLOAD_OFFSET_BYTES;
-    meta_tx.ploadLen = TEST_PAYLOAD_LEN;
-
-    Pktlib_getDataBuffer(tip,&pData,&len);
-    pIpHdr = pData + meta_tx.ipOffBytes;
-    meta_tx.pseudoHdrChecksum =
-        test_utilGetIpv4PsudoChkSum(pIpHdr,(TEST_PAYLOAD_LEN+TEST_PKT_UDP_HDR_LEN));
-
-   /* post it to netcp tx channel*/
-   meta.u.tx_meta=&meta_tx;
-#ifdef DEBUG_DESC
-   if (house_pkts_gened<16) dump_descr((long *) tip, house_pkts_gened);
-   else if (house_pkts_gened>99) dump_descr((long *) tip,house_pkts_gened);
-#endif
-   pktio_send(netcp_tx_chan,tip,&meta,&err);
-   if (err == 0) stats.itx +=1;
+        /* IPSEC interface number processing */
+        parse_simple_param_u32((char*)&config_file.ipsec_if_no[0], &netTestCfg.ipsec_if_no);
 
-   house_pkts_gened +=1;
- }
-}
+        netTest_utilParseSA(&config_file);
 
+        parse_simple_param_u32(&config_file.dest_udp_port_config, &netTestCfg.dest_udp_port_config);
+    }
 
-/***************************************
- ********** test driver*****************
- ***************************************/
-int main(int argc, char **argv)
-{
-int err;
-rlim_t oss,ss = 1024*1024;
-struct rlimit rl;
+    memset(&sa_info, 0, sizeof(sa_info));
 
-err= getrlimit(RLIMIT_STACK,&rl);
-if (!err) printf(" stack limit = %d\n",rl.rlim_cur); else printf("getrlimit failed\n");
-#if 0
-rl.rlim_cur = ss;
-err=setrlimit(RLIMIT_STACK,&rl);
-if (!err) printf("set stack to %d\n",rl.rlim_cur); else printf("setrlimit failed\n");
+
+#ifdef netTest_MULTI_THREAD
+    /* assign main net_test thread to run on core 0 */
+    CPU_ZERO( &cpu_set);
+    CPU_SET( 0, &cpu_set);
+    hplib_utilSetupThread(0, &cpu_set);
 #endif
 
-if (argc>=2)  np2process = atoi(argv[1]);
-if (np2process<0) np2process = NP; /* default */
-if (argc==3)  perslow = atoi(argv[2]);
-if ((perslow<0)||(perslow>100)) perslow=PERSLOW;//default
-if (argc>3) {printf("net_test  <no of pkts to process> <percent slow path>\n"); exit(1);}
+    /* create netapi */
+    netapi_handle = netapi_init(NETAPI_SYS_MASTER, &our_netapi_default_cfg);
+
+    /* configure expection packet handling with netapi */
+    netapi_netcpCfgExceptions(netapi_handle,
+                              NETCP_CFG_ALL_EXCEPTIONS,
+                              NETCP_CFG_ACTION_DISCARD, 
+                              (NETCP_CFG_ROUTE_HANDLE_T) NULL);
+    expPkt_appid = netapi_netcpCfgExceptions(netapi_handle, 
+                                             7,
+                                             NETCP_CFG_ACTION_TO_SW,
+                                             (NETCP_CFG_ROUTE_HANDLE_T) NULL);
+
+    /* open the main heap */
+    ourHeap = Pktlib_findHeapByName("netapi");
+    if (!ourHeap)
+    {
+        printf("Pktlib_findHeapByName()  fail\n");
+        exit(1);
+    }
 
+    open_pktio_tx_channels();
 
-//real mode, so update our test packet mac header and ip header
-if (pktloopback==0)
-{
-memcpy(&testPkt,&real_mac_header[0],14); //overwrite test pkt mac address
-memcpy(&testPkt[26],&real_ip_addr[0],8);//overrite test pkt ip addresses
-}
+    printf("net_test: %d bytes left in our CMA area\n", netapi_getBufMemRemainder());
+    /* create scheduler instance */
+    our_sched =netapi_schedOpen(netapi_handle,&our_sched_cfg, &err);
+    if (!our_sched) {printf("sched create failed\n"); exit(1);}
 
-/*******************************************/
-/*************NETAPI STARTUP****************/
-/*******************************************/
-
-/* create netapi */
-netapi_handle = netapi_init(NETAPI_SYS_MASTER);
-
-/* open the main heap */
-OurHeap = Pktlib_findHeapByName("netapi");
-if (!OurHeap) {printf("findheapbyname fail\n"); exit(1);}
-
-/* create a pktio channel */
-our_chan=pktio_create(netapi_handle,"our1stq",recv_cb, &our_chan_cfg,&err);
-if (!our_chan) {printf("pktio create failed err=%d\n",err); exit(1);}
-
-/* open netcp default tx, rx queues */
-netcp_tx_chan= pktio_open(netapi_handle, NETCP_TX, NULL, &netcp_tx_cfg,  &err);
-if (!netcp_tx_chan) {printf("pktio open TX failed err=%d\n",err); exit(1);}
-netcp_rx_chan= pktio_open(netapi_handle, NETCP_RX, recv_cb, &netcp_rx_cfg,  &err);
-if (!netcp_rx_chan) {printf("pktio open RX failed err=%d\n",err); exit(1);}
-
-
-/* create scheduler instance */
-our_sched =netapi_schedOpen(netapi_handle,&our_sched_cfg, &err);
-if (!our_sched) {printf("sched create failed\n"); exit(1);}
-
-/* add mac intefaces */
-netcp_cfgCreateMacInterface(
-                  netapi_handle,
-                  &mac0[0],
-                  0,0,
-                  (NETCP_CFG_ROUTE_HANDLE_T)  NULL,
-                  (NETCP_CFG_VLAN_T ) NULL ,  //future
-                  1, 
-                  &err);
-if (err) {printf("addmac0 failed %d\n",err); exit(1); } 
-
-//attach an IP to this interface
-netcp_addIp(
-                  netapi_handle,
-                  0,
-                  nwal_IPV4,
-                  &OurIp0,
-                  NULL,  //all IP
-                  (NETCP_CFG_ROUTE_HANDLE_T) NULL,
-                  &err
-                  );
-if (err) {printf("addip0 failed %d\n",err); exit(1); } 
-#if 1
-//create a 2nd mac instance
-netcp_cfgCreateMacInterface(
-                  netapi_handle,
-                  &mac1[0],
-                  1,1,
-                  (NETCP_CFG_ROUTE_HANDLE_T)  NULL,
-                  (NETCP_CFG_VLAN_T ) NULL ,  //future
-                  1,
-                  &err);
-if (err) {printf("addmac1 failed %d\n",err); exit(1); }
-#endif
 
- ourTimerBlock = netapi_TimerGroupCreate(
-        netapi_handle,
-        "our1sttimer",
-        our_timer_cb,
-        0,    //1 if timers local to thread
-        0,    //1 if expect to cancel
-        netapi_getTicksPerSec()/1000,  /* 1 msc resolution for these timers */
-        netapi_getTicksPerSec()/5000, /* would like .5 msc tolerence */
-        100,
-        &err);
-if (err) {printf("timergroupcreate failed %d\n",err); exit(1);}
+    /*create net_test MAC interfaces, attach IP to created MAC interfaces */
+    netTest_utilCreateInterfaces(netTestCfg.num_macs, netTestCfg.num_ips);
 
-//start a couple of timers 
-t1 = netapi_TimerGroupStartTimer(
-        ourTimerBlock,
-        (void *) 1,
-        100LL,  //timer group ticks
-        &err);
-if (err) {printf("timerstart failed %d\n");}
-t2 = netapi_TimerGroupStartTimer(
-        ourTimerBlock,
-        (void *) 2,
-        200LL,  //timer group ticks
-        &err);
-if (err) {printf("timerstart failed %d\n");}
-t3 = netapi_TimerGroupStartTimer(
-        ourTimerBlock,
-        (void *) 3,
-        300LL,  //timer group ticks
-        &err);
-if (err) {printf("timerstart failed %d\n");}
+    /* lookup Database for SA context, this is used by packet processing routines to get RX and TX SA information*/
+    p_trie_sa_rx = trie_new();
+    p_trie_sa_tx = trie_new();
+    if (!p_trie_sa_rx || !p_trie_sa_tx)
+        {printf("trie alloc for SA  failed\n"); exit(1);}
 
+#ifdef netTest_DSP_FASTPATH
+    setup_netTestDSPFastPath(netapi_handle);
+#endif
 
-/*********************************************/
-/*****************end NETAPI STARTUP**********/
-/*********************************************/
-
+    /* Create RX SA's, RX Policy and TX SA's, all SA configuration parameters are read from net_test_config.txt file */
+    netTest_utilCreateSecAssoc();
 
-/********************************************
-* Basic pkt loopback test
-*********************************************/
+#ifdef netTest_MULTI_THREAD
+{
+#if 0
+    nwalGlobCxtInfo_t nwalGlobCxt;
+    nwalLocCxtInfo_t nwalLocCxt;
+    int count;
+    NETAPI_HANDLE_T * n = (NETAPI_HANDLE_T *) netapi_handle;
+
+    nwal_getGlobCxtInfo(((NETAPI_GLOBAL_T*) (n->global))->nwal_context.nwalInstHandle,&nwalGlobCxt);
+
+
+    printf("*******NWAL Global Context Info Dump Begin *******\n");
+    printf("rxPaSaFlowId:%d,rxSaPaFlowId:%d rxDefPktQ:0x%x \n",
+                       nwalGlobCxt.rxPaSaFlowId,nwalGlobCxt.rxSaPaFlowId,
+                        nwalGlobCxt.rxDefPktQ);
+    printf("defFlowQ:0x%x,passCppiHandle:0x%x extErr:%d \n",
+                       nwalGlobCxt.defFlowQ,nwalGlobCxt.passCppiHandle,
+                       nwalGlobCxt.extErr);
+    for(count=0;count < nwalGlobCxt.numPaPDSPs;count++)
+    {
+        printf("NetCP PASS PDSP - %d Version:0x%x \n",
+                      count,nwalGlobCxt.pdspVer[count]);
+    }
+    printf("*******NWAL Global Context Info Dump End *******\n\n");
 
 
-/* create TRIE */
-P_trie = trie_new();
-if (!P_trie) {printf("trie alloc failed\n"); exit(1);}
+    nwal_getLocCxtInfo(((NETAPI_GLOBAL_T*) (n->global))->nwal_context.nwalInstHandle,&nwalLocCxt);
+    printf("*******NWAL Local Context Info Dump Begin *******\n");
+    printf("rxCtlQ:%d,rxL4PktQ:%d \n",
+                        nwalLocCxt.rxCtlQ,
+                        nwalLocCxt.rxL4PktQ);
+    printf("rxPktFlowId:0x%x,rxCtlFlowId:0x%x extErr:%d \n",
+                       nwalLocCxt.rxPktFlowId
+                       ,nwalLocCxt.rxCtlFlowId,
+                       nwalLocCxt.extErr);
+    
+    printf("*******NWAL Local Context Info Dump End *******\n\n");
 
-nat = (HEAD_T *) malloc(NE * sizeof(HEAD_T));
-if (!nat) {printf("malloc of nat table failed\n"); exit(1);}
+#endif
 
-gen_pkts(np2process<NP ? np2process:NP);
+    /* create and set affinity of slow path and fast path threads to
+    * specific CPU cores as specified in the net_test_config.txt file */
+    netTest_utilCreateSpFpThreads(netTestCfg.num_sp_threads, 
+                                  (NET_TEST_FUNC_PTR) slow_path_thread,
+                                  netTestCfg.num_fp_threads,
+                                  (NET_TEST_FUNC_PTR) fast_path_thread);
+
+    char c;
+        //this thread of execution (main) now just waits on user input
+        for(;;)
+        {
+           printf(">");
+           c=getchar();
+           if (c=='q') {QUIT=1;break;}
+           else if (c=='s') netTest_utilsStatsCb(netapi_handle, &netcp_stats);
+           else if (c=='h') printf("'q' to quit,  's' for stats, 'h' for help\n");
+        }
+
+        netTest_utilRemoveSpFpThreads(netTestCfg.num_sp_threads, netTestCfg.num_fp_threads);
 
-/* build table */
-build_table(P_trie);
+}
+#else
+    /*********************************************/
+    /**************Entry point into scheduler ****/
+    /*********************************************/
+    //netTest_utilCreateSecAssoc(netcp_sb_rx_chan, netcp_sb_tx_chan,netcp_tx_chan);
+    netapi_schedRun(our_sched, &err);
+#endif
 
+    /* done */
+    netTest_utilsStatsCb(netapi_handle, NULL);
 
-/* processing loop: get pkt, check it, look up in table, copy new header,
-   send packet */
-srand((unsigned) np2process);
 
+    /* cleanup*/
+     netTest_utilDeleteSecAssoc();
 
-/*********************************************/
-/**************Entry point into scheduler ****/
-/*********************************************/
-netapi_schedWaitForEvents(our_sched, &err);
+    netTest_utilDeleteInterfaces(netTestCfg.num_macs, netTestCfg.num_ips);
 
-/* done */
-printf("done: itx=%d rx=%d tx=%d bad=%d slow=%d\n",stats.itx, stats.rx, stats.tx, stats.n_bad, stats.n_new);
-our_stats_cb(netapi_handle, NULL);
+    /* close pktio channels we opened via open_pktio_tx_channels() */
+    close_pktio_channels();
+#ifdef netTest_DSP_FASTPATH
+    teardown_netTestDSPFastPath();
+#endif
+    netapi_shutdown(netapi_handle);
 
-netapi_shutdown(netapi_handle);
+}
 
+#if 1
+/* Stub functions */
+Trie * route_init(void)
+{
 }
+void route_add(Trie * Pt, unsigned long * Pdest_ipBE, void * Pour_route)
+{
+}
+#endif