summaryrefslogblamecommitdiffstats
path: root/drivers/infiniband/hw/nes/nes_cm.c
blob: 456da13b68de1972ddc81795901012bf2e684042 (plain) (tree)
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657









































                                                                      
                          






































                                                                                  























                                                                            

















                                                                      
                                     
















































                                                                             
                                                        




























































































                                                                                                  


                                                                                      





























































































































                                                                                            

                               


                                                          


















                                                                                            
                                                             























                                                                                          
                                                             




















                                                                        
                                                 








































































































































































































                                                                                                                       
                                                             
































































                                                                                 
                                                  




















                                                                          
                                                


















                                                                          
                                                                     





















                                                                          
                                                                











































































































































































                                                                                                                  
                                



























































































































                                                                                                    
                                                                     





































































































































































































                                                                                                           

                                                                           




































































































































































































































































































































































                                                                                                                     



                                                                            


















































































                                                                                                 

                                                                                        







                                                    


                                                           






























                                                                                           
                                                                                  













































                                                                                            

                                                                                  























































































                                                                                                                      
                                                  


























































                                                                                 
                                                            























                                                                  
                                                   







                              
                                                                        



















































































































                                                                                                        
                                                           











                                                                               
                                                    













































































































































                                                                                                            
                                                           






















































                                                                                              
                      



















































































































                                                                                                                  

                                                               











































































































































































































































































































                                                                                                
                                                          











                                       
                      












































































                                                                                                                

                                                               











































                                                                                         
                                                              



















































                                                                                                   
                                                      









































                                                                              
                                                        












































                                                                                    
                                                        





































































                                                                                                      
/*
 * Copyright (c) 2006 - 2008 NetEffect, Inc. All rights reserved.
 *
 * This software is available to you under a choice of one of two
 * licenses.  You may choose to be licensed under the terms of the GNU
 * General Public License (GPL) Version 2, available from the file
 * COPYING in the main directory of this source tree, or the
 * OpenIB.org BSD license below:
 *
 *     Redistribution and use in source and binary forms, with or
 *     without modification, are permitted provided that the following
 *     conditions are met:
 *
 *      - Redistributions of source code must retain the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer.
 *
 *      - Redistributions in binary form must reproduce the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer in the documentation and/or other materials
 *        provided with the distribution.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 * SOFTWARE.
 *
 */


#define TCPOPT_TIMESTAMP 8

#include <asm/atomic.h>
#include <linux/skbuff.h>
#include <linux/ip.h>
#include <linux/tcp.h>
#include <linux/init.h>
#include <linux/if_arp.h>
#include <linux/if_vlan.h>
#include <linux/notifier.h>
#include <linux/net.h>
#include <linux/types.h>
#include <linux/timer.h>
#include <linux/time.h>
#include <linux/delay.h>
#include <linux/etherdevice.h>
#include <linux/netdevice.h>
#include <linux/random.h>
#include <linux/list.h>
#include <linux/threads.h>

#include <net/neighbour.h>
#include <net/route.h>
#include <net/ip_fib.h>

#include "nes.h"

u32 cm_packets_sent;
u32 cm_packets_bounced;
u32 cm_packets_dropped;
u32 cm_packets_retrans;
u32 cm_packets_created;
u32 cm_packets_received;
u32 cm_listens_created;
u32 cm_listens_destroyed;
u32 cm_backlog_drops;
atomic_t cm_loopbacks;
atomic_t cm_nodes_created;
atomic_t cm_nodes_destroyed;
atomic_t cm_accel_dropped_pkts;
atomic_t cm_resets_recvd;

static inline int mini_cm_accelerated(struct nes_cm_core *, struct nes_cm_node *);
static struct nes_cm_listener *mini_cm_listen(struct nes_cm_core *,
		struct nes_vnic *, struct nes_cm_info *);
static int add_ref_cm_node(struct nes_cm_node *);
static int rem_ref_cm_node(struct nes_cm_core *, struct nes_cm_node *);
static int mini_cm_del_listen(struct nes_cm_core *, struct nes_cm_listener *);
static struct sk_buff *form_cm_frame(struct sk_buff *, struct nes_cm_node *,
				     void *, u32, void *, u32, u8);
static struct sk_buff *get_free_pkt(struct nes_cm_node *cm_node);

static struct nes_cm_node *mini_cm_connect(struct nes_cm_core *,
					   struct nes_vnic *,
					   struct ietf_mpa_frame *,
					   struct nes_cm_info *);
static int mini_cm_accept(struct nes_cm_core *, struct ietf_mpa_frame *,
			  struct nes_cm_node *);
static int mini_cm_reject(struct nes_cm_core *, struct ietf_mpa_frame *,
			  struct nes_cm_node *);
static int mini_cm_close(struct nes_cm_core *, struct nes_cm_node *);
static int mini_cm_recv_pkt(struct nes_cm_core *, struct nes_vnic *,
			    struct sk_buff *);
static int mini_cm_dealloc_core(struct nes_cm_core *);
static int mini_cm_get(struct nes_cm_core *);
static int mini_cm_set(struct nes_cm_core *, u32, u32);
static int nes_cm_disconn_true(struct nes_qp *);
static int nes_cm_post_event(struct nes_cm_event *event);
static int nes_disconnect(struct nes_qp *nesqp, int abrupt);
static void nes_disconnect_worker(struct work_struct *work);
static int send_ack(struct nes_cm_node *cm_node);
static int send_fin(struct nes_cm_node *cm_node, struct sk_buff *skb);

/* External CM API Interface */
/* instance of function pointers for client API */
/* set address of this instance to cm_core->cm_ops at cm_core alloc */
static struct nes_cm_ops nes_cm_api = {
	mini_cm_accelerated,
	mini_cm_listen,
	mini_cm_del_listen,
	mini_cm_connect,
	mini_cm_close,
	mini_cm_accept,
	mini_cm_reject,
	mini_cm_recv_pkt,
	mini_cm_dealloc_core,
	mini_cm_get,
	mini_cm_set
};

static struct nes_cm_core *g_cm_core;

atomic_t cm_connects;
atomic_t cm_accepts;
atomic_t cm_disconnects;
atomic_t cm_closes;
atomic_t cm_connecteds;
atomic_t cm_connect_reqs;
atomic_t cm_rejects;


/**
 * create_event
 */
static struct nes_cm_event *create_event(struct nes_cm_node *cm_node,
		enum nes_cm_event_type type)
{
	struct nes_cm_event *event;

	if (!cm_node->cm_id)
		return NULL;

	/* allocate an empty event */
	event = kzalloc(sizeof(*event), GFP_ATOMIC);

	if (!event)
		return NULL;

	event->type = type;
	event->cm_node = cm_node;
	event->cm_info.rem_addr = cm_node->rem_addr;
	event->cm_info.loc_addr = cm_node->loc_addr;
	event->cm_info.rem_port = cm_node->rem_port;
	event->cm_info.loc_port = cm_node->loc_port;
	event->cm_info.cm_id = cm_node->cm_id;

	nes_debug(NES_DBG_CM, "Created event=%p, type=%u, dst_addr=%08x[%x],"
			" src_addr=%08x[%x]\n",
			event, type,
			event->cm_info.loc_addr, event->cm_info.loc_port,
			event->cm_info.rem_addr, event->cm_info.rem_port);

	nes_cm_post_event(event);
	return event;
}


/**
 * send_mpa_request
 */
static int send_mpa_request(struct nes_cm_node *cm_node)
{
	struct sk_buff *skb;
	int ret;

	skb = get_free_pkt(cm_node);
	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	/* send an MPA Request frame */
	form_cm_frame(skb, cm_node, NULL, 0, &cm_node->mpa_frame,
			cm_node->mpa_frame_size, SET_ACK);

	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);
	if (ret < 0) {
		return ret;
	}

	return 0;
}


/**
 * recv_mpa - process a received TCP pkt, we are expecting an
 * IETF MPA frame
 */
static int parse_mpa(struct nes_cm_node *cm_node, u8 *buffer, u32 len)
{
	struct ietf_mpa_frame *mpa_frame;

	/* assume req frame is in tcp data payload */
	if (len < sizeof(struct ietf_mpa_frame)) {
		nes_debug(NES_DBG_CM, "The received ietf buffer was too small (%x)\n", len);
		return -1;
	}

	mpa_frame = (struct ietf_mpa_frame *)buffer;
	cm_node->mpa_frame_size = ntohs(mpa_frame->priv_data_len);

	if (cm_node->mpa_frame_size + sizeof(struct ietf_mpa_frame) != len) {
		nes_debug(NES_DBG_CM, "The received ietf buffer was not right"
				" complete (%x + %x != %x)\n",
				cm_node->mpa_frame_size, (u32)sizeof(struct ietf_mpa_frame), len);
		return -1;
	}

	/* copy entire MPA frame to our cm_node's frame */
	memcpy(cm_node->mpa_frame_buf, buffer + sizeof(struct ietf_mpa_frame),
			cm_node->mpa_frame_size);

	return 0;
}


/**
 * handle_exception_pkt - process an exception packet.
 * We have been in a TSA state, and we have now received SW
 * TCP/IP traffic should be a FIN request or IP pkt with options
 */
static int handle_exception_pkt(struct nes_cm_node *cm_node, struct sk_buff *skb)
{
	int ret = 0;
	struct tcphdr *tcph = tcp_hdr(skb);

	/* first check to see if this a FIN pkt */
	if (tcph->fin) {
		/* we need to ACK the FIN request */
		send_ack(cm_node);

		/* check which side we are (client/server) and set next state accordingly */
		if (cm_node->tcp_cntxt.client)
			cm_node->state = NES_CM_STATE_CLOSING;
		else {
			/* we are the server side */
			cm_node->state = NES_CM_STATE_CLOSE_WAIT;
			/* since this is a self contained CM we don't wait for */
			/* an APP to close us, just send final FIN immediately */
			ret = send_fin(cm_node, NULL);
			cm_node->state = NES_CM_STATE_LAST_ACK;
		}
	} else {
		ret = -EINVAL;
	}

	return ret;
}


/**
 * form_cm_frame - get a free packet and build empty frame Use
 * node info to build.
 */
static struct sk_buff *form_cm_frame(struct sk_buff *skb, struct nes_cm_node *cm_node,
				     void *options, u32 optionsize, void *data,
				     u32 datasize, u8 flags)
{
	struct tcphdr *tcph;
	struct iphdr *iph;
	struct ethhdr *ethh;
	u8 *buf;
	u16 packetsize = sizeof(*iph);

	packetsize += sizeof(*tcph);
	packetsize +=  optionsize + datasize;

	memset(skb->data, 0x00, ETH_HLEN + sizeof(*iph) + sizeof(*tcph));

	skb->len = 0;
	buf = skb_put(skb, packetsize + ETH_HLEN);

	ethh = (struct ethhdr *) buf;
	buf += ETH_HLEN;

	iph = (struct iphdr *)buf;
	buf += sizeof(*iph);
	tcph = (struct tcphdr *)buf;
	skb_reset_mac_header(skb);
	skb_set_network_header(skb, ETH_HLEN);
	skb_set_transport_header(skb, ETH_HLEN+sizeof(*iph));
	buf += sizeof(*tcph);

	skb->ip_summed = CHECKSUM_PARTIAL;
	skb->protocol = htons(0x800);
	skb->data_len = 0;
	skb->mac_len = ETH_HLEN;

	memcpy(ethh->h_dest, cm_node->rem_mac, ETH_ALEN);
	memcpy(ethh->h_source, cm_node->loc_mac, ETH_ALEN);
	ethh->h_proto = htons(0x0800);

	iph->version = IPVERSION;
	iph->ihl = 5;		/* 5 * 4Byte words, IP headr len */
	iph->tos = 0;
	iph->tot_len = htons(packetsize);
	iph->id = htons(++cm_node->tcp_cntxt.loc_id);

	iph->frag_off = htons(0x4000);
	iph->ttl = 0x40;
	iph->protocol = 0x06;	/* IPPROTO_TCP */

	iph->saddr = htonl(cm_node->loc_addr);
	iph->daddr = htonl(cm_node->rem_addr);

	tcph->source = htons(cm_node->loc_port);
	tcph->dest = htons(cm_node->rem_port);
	tcph->seq = htonl(cm_node->tcp_cntxt.loc_seq_num);

	if (flags & SET_ACK) {
		cm_node->tcp_cntxt.loc_ack_num = cm_node->tcp_cntxt.rcv_nxt;
		tcph->ack_seq = htonl(cm_node->tcp_cntxt.loc_ack_num);
		tcph->ack = 1;
	} else
		tcph->ack_seq = 0;

	if (flags & SET_SYN) {
		cm_node->tcp_cntxt.loc_seq_num++;
		tcph->syn = 1;
	} else
		cm_node->tcp_cntxt.loc_seq_num += datasize;	/* data (no headers) */

	if (flags & SET_FIN)
		tcph->fin = 1;

	if (flags & SET_RST)
		tcph->rst = 1;

	tcph->doff = (u16)((sizeof(*tcph) + optionsize + 3) >> 2);
	tcph->window = htons(cm_node->tcp_cntxt.rcv_wnd);
	tcph->urg_ptr = 0;
	if (optionsize)
		memcpy(buf, options, optionsize);
	buf += optionsize;
	if (datasize)
		memcpy(buf, data, datasize);

	skb_shinfo(skb)->nr_frags = 0;
	cm_packets_created++;

	return skb;
}


/**
 * print_core - dump a cm core
 */
static void print_core(struct nes_cm_core *core)
{
	nes_debug(NES_DBG_CM, "---------------------------------------------\n");
	nes_debug(NES_DBG_CM, "CM Core  -- (core = %p )\n", core);
	if (!core)
		return;
	nes_debug(NES_DBG_CM, "---------------------------------------------\n");
	nes_debug(NES_DBG_CM, "Session ID    : %u \n", atomic_read(&core->session_id));

	nes_debug(NES_DBG_CM, "State         : %u \n",  core->state);

	nes_debug(NES_DBG_CM, "Tx Free cnt   : %u \n", skb_queue_len(&core->tx_free_list));
	nes_debug(NES_DBG_CM, "Listen Nodes  : %u \n", atomic_read(&core->listen_node_cnt));
	nes_debug(NES_DBG_CM, "Active Nodes  : %u \n", atomic_read(&core->node_cnt));

	nes_debug(NES_DBG_CM, "core          : %p \n", core);

	nes_debug(NES_DBG_CM, "-------------- end core ---------------\n");
}


/**
 * schedule_nes_timer
 * note - cm_node needs to be protected before calling this. Encase in:
 *			rem_ref_cm_node(cm_core, cm_node);add_ref_cm_node(cm_node);
 */
int schedule_nes_timer(struct nes_cm_node *cm_node, struct sk_buff *skb,
		enum nes_timer_type type, int send_retrans,
		int close_when_complete)
{
	unsigned long  flags;
	struct nes_cm_core *cm_core;
	struct nes_timer_entry *new_send;
	int ret = 0;
	u32 was_timer_set;

	if (!cm_node)
		return -EINVAL;
	new_send = kzalloc(sizeof(*new_send), GFP_ATOMIC);
	if (!new_send)
		return -1;

	/* new_send->timetosend = currenttime */
	new_send->retrycount = NES_DEFAULT_RETRYS;
	new_send->retranscount = NES_DEFAULT_RETRANS;
	new_send->skb = skb;
	new_send->timetosend = jiffies;
	new_send->type = type;
	new_send->netdev = cm_node->netdev;
	new_send->send_retrans = send_retrans;
	new_send->close_when_complete = close_when_complete;

	if (type == NES_TIMER_TYPE_CLOSE) {
		new_send->timetosend += (HZ/2);	/* TODO: decide on the correct value here */
		spin_lock_irqsave(&cm_node->recv_list_lock, flags);
		list_add_tail(&new_send->list, &cm_node->recv_list);
		spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
	}

	if (type == NES_TIMER_TYPE_SEND) {
		new_send->seq_num = ntohl(tcp_hdr(skb)->seq);
		atomic_inc(&new_send->skb->users);

		ret = nes_nic_cm_xmit(new_send->skb, cm_node->netdev);
		if (ret != NETDEV_TX_OK) {
			nes_debug(NES_DBG_CM, "Error sending packet %p (jiffies = %lu)\n",
					new_send, jiffies);
			atomic_dec(&new_send->skb->users);
			new_send->timetosend = jiffies;
		} else {
			cm_packets_sent++;
			if (!send_retrans) {
				if (close_when_complete)
					rem_ref_cm_node(cm_node->cm_core, cm_node);
				dev_kfree_skb_any(new_send->skb);
				kfree(new_send);
				return ret;
			}
			new_send->timetosend = jiffies + NES_RETRY_TIMEOUT;
		}
		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
		list_add_tail(&new_send->list, &cm_node->retrans_list);
		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
	}
	if (type == NES_TIMER_TYPE_RECV) {
		new_send->seq_num = ntohl(tcp_hdr(skb)->seq);
		new_send->timetosend = jiffies;
		spin_lock_irqsave(&cm_node->recv_list_lock, flags);
		list_add_tail(&new_send->list, &cm_node->recv_list);
		spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
	}
	cm_core = cm_node->cm_core;

	was_timer_set = timer_pending(&cm_core->tcp_timer);

	if (!was_timer_set) {
		cm_core->tcp_timer.expires = new_send->timetosend;
		add_timer(&cm_core->tcp_timer);
	}

	return ret;
}


/**
 * nes_cm_timer_tick
 */
static void nes_cm_timer_tick(unsigned long pass)
{
	unsigned long flags, qplockflags;
	unsigned long nexttimeout = jiffies + NES_LONG_TIME;
	struct iw_cm_id *cm_id;
	struct nes_cm_node *cm_node;
	struct nes_timer_entry *send_entry, *recv_entry;
	struct list_head *list_core, *list_core_temp;
	struct list_head *list_node, *list_node_temp;
	struct nes_cm_core *cm_core = g_cm_core;
	struct nes_qp *nesqp;
	struct sk_buff *skb;
	u32 settimer = 0;
	int ret = NETDEV_TX_OK;
	int    node_done;

	spin_lock_irqsave(&cm_core->ht_lock, flags);

	list_for_each_safe(list_node, list_core_temp, &cm_core->connected_nodes) {
		cm_node = container_of(list_node, struct nes_cm_node, list);
		add_ref_cm_node(cm_node);
		spin_unlock_irqrestore(&cm_core->ht_lock, flags);
		spin_lock_irqsave(&cm_node->recv_list_lock, flags);
		list_for_each_safe(list_core, list_node_temp, &cm_node->recv_list) {
			recv_entry = container_of(list_core, struct nes_timer_entry, list);
			if ((time_after(recv_entry->timetosend, jiffies)) &&
					(recv_entry->type == NES_TIMER_TYPE_CLOSE)) {
				if (nexttimeout > recv_entry->timetosend || !settimer) {
					nexttimeout = recv_entry->timetosend;
					settimer = 1;
				}
				continue;
			}
			list_del(&recv_entry->list);
			cm_id = cm_node->cm_id;
			spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
			if (recv_entry->type == NES_TIMER_TYPE_CLOSE) {
				nesqp = (struct nes_qp *)recv_entry->skb;
				spin_lock_irqsave(&nesqp->lock, qplockflags);
				if (nesqp->cm_id) {
					nes_debug(NES_DBG_CM, "QP%u: cm_id = %p, refcount = %d: "
							"****** HIT A NES_TIMER_TYPE_CLOSE"
							" with something to do!!! ******\n",
							nesqp->hwqp.qp_id, cm_id,
							atomic_read(&nesqp->refcount));
					nesqp->hw_tcp_state = NES_AEQE_TCP_STATE_CLOSED;
					nesqp->last_aeq = NES_AEQE_AEID_RESET_SENT;
					nesqp->ibqp_state = IB_QPS_ERR;
					spin_unlock_irqrestore(&nesqp->lock, qplockflags);
					nes_cm_disconn(nesqp);
				} else {
					spin_unlock_irqrestore(&nesqp->lock, qplockflags);
					nes_debug(NES_DBG_CM, "QP%u: cm_id = %p, refcount = %d:"
							" ****** HIT A NES_TIMER_TYPE_CLOSE"
							" with nothing to do!!! ******\n",
							nesqp->hwqp.qp_id, cm_id,
							atomic_read(&nesqp->refcount));
					nes_rem_ref(&nesqp->ibqp);
				}
				if (cm_id)
					cm_id->rem_ref(cm_id);
			}
			kfree(recv_entry);
			spin_lock_irqsave(&cm_node->recv_list_lock, flags);
		}
		spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);

		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
		node_done = 0;
		list_for_each_safe(list_core, list_node_temp, &cm_node->retrans_list) {
			if (node_done) {
				break;
			}
			send_entry = container_of(list_core, struct nes_timer_entry, list);
			if (time_after(send_entry->timetosend, jiffies)) {
				if (cm_node->state != NES_CM_STATE_TSA) {
					if ((nexttimeout > send_entry->timetosend) || !settimer) {
						nexttimeout = send_entry->timetosend;
						settimer = 1;
					}
					node_done = 1;
					continue;
				} else {
					list_del(&send_entry->list);
					skb = send_entry->skb;
					spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
					dev_kfree_skb_any(skb);
					kfree(send_entry);
					spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
					continue;
				}
			}
			if (send_entry->type == NES_TIMER_NODE_CLEANUP) {
				list_del(&send_entry->list);
				spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
				kfree(send_entry);
				spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
				continue;
			}
			if ((send_entry->seq_num < cm_node->tcp_cntxt.rem_ack_num) ||
					(cm_node->state == NES_CM_STATE_TSA) ||
					(cm_node->state == NES_CM_STATE_CLOSED)) {
				skb = send_entry->skb;
				list_del(&send_entry->list);
				spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
				kfree(send_entry);
				dev_kfree_skb_any(skb);
				spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
				continue;
			}

			if (!send_entry->retranscount || !send_entry->retrycount) {
				cm_packets_dropped++;
				skb = send_entry->skb;
				list_del(&send_entry->list);
				spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
				dev_kfree_skb_any(skb);
				kfree(send_entry);
				if (cm_node->state == NES_CM_STATE_SYN_RCVD) {
					/* this node never even generated an indication up to the cm */
					rem_ref_cm_node(cm_core, cm_node);
				} else {
					cm_node->state = NES_CM_STATE_CLOSED;
					create_event(cm_node, NES_CM_EVENT_ABORTED);
				}
				spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
				continue;
			}
			/* this seems like the correct place, but leave send entry unprotected */
			// spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
			atomic_inc(&send_entry->skb->users);
			cm_packets_retrans++;
			nes_debug(NES_DBG_CM, "Retransmitting send_entry %p for node %p,"
					" jiffies = %lu, time to send =  %lu, retranscount = %u, "
					"send_entry->seq_num = 0x%08X, cm_node->tcp_cntxt.rem_ack_num = 0x%08X\n",
					send_entry, cm_node, jiffies, send_entry->timetosend, send_entry->retranscount,
					send_entry->seq_num, cm_node->tcp_cntxt.rem_ack_num);

			spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
			ret = nes_nic_cm_xmit(send_entry->skb, cm_node->netdev);
			if (ret != NETDEV_TX_OK) {
				cm_packets_bounced++;
				atomic_dec(&send_entry->skb->users);
				send_entry->retrycount--;
				nexttimeout = jiffies + NES_SHORT_TIME;
				settimer = 1;
				node_done = 1;
				spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
				continue;
			} else {
				cm_packets_sent++;
			}
			spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
			list_del(&send_entry->list);
			nes_debug(NES_DBG_CM, "Packet Sent: retrans count = %u, retry count = %u.\n",
					send_entry->retranscount, send_entry->retrycount);
			if (send_entry->send_retrans) {
				send_entry->retranscount--;
				send_entry->timetosend = jiffies + NES_RETRY_TIMEOUT;
				if (nexttimeout > send_entry->timetosend || !settimer) {
					nexttimeout = send_entry->timetosend;
					settimer = 1;
				}
				list_add(&send_entry->list, &cm_node->retrans_list);
				continue;
			} else {
				int close_when_complete;
				skb = send_entry->skb;
				close_when_complete = send_entry->close_when_complete;
				spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
				if (close_when_complete) {
					BUG_ON(atomic_read(&cm_node->ref_count) == 1);
					rem_ref_cm_node(cm_core, cm_node);
				}
				dev_kfree_skb_any(skb);
				kfree(send_entry);
				spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
				continue;
			}
		}
		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);

		rem_ref_cm_node(cm_core, cm_node);

		spin_lock_irqsave(&cm_core->ht_lock, flags);
		if (ret != NETDEV_TX_OK)
			break;
	}
	spin_unlock_irqrestore(&cm_core->ht_lock, flags);

	if (settimer) {
		if (!timer_pending(&cm_core->tcp_timer)) {
			cm_core->tcp_timer.expires  = nexttimeout;
			add_timer(&cm_core->tcp_timer);
		}
	}
}


/**
 * send_syn
 */
static int send_syn(struct nes_cm_node *cm_node, u32 sendack)
{
	int ret;
	int flags = SET_SYN;
	struct sk_buff *skb;
	char optionsbuffer[sizeof(struct option_mss) +
			sizeof(struct option_windowscale) +
			sizeof(struct option_base) + 1];

	int optionssize = 0;
	/* Sending MSS option */
	union all_known_options *options;

	if (!cm_node)
		return -EINVAL;

	options = (union all_known_options *)&optionsbuffer[optionssize];
	options->as_mss.optionnum = OPTION_NUMBER_MSS;
	options->as_mss.length = sizeof(struct option_mss);
	options->as_mss.mss = htons(cm_node->tcp_cntxt.mss);
	optionssize += sizeof(struct option_mss);

	options = (union all_known_options *)&optionsbuffer[optionssize];
	options->as_windowscale.optionnum = OPTION_NUMBER_WINDOW_SCALE;
	options->as_windowscale.length = sizeof(struct option_windowscale);
	options->as_windowscale.shiftcount = cm_node->tcp_cntxt.rcv_wscale;
	optionssize += sizeof(struct option_windowscale);

	if (sendack && !(NES_DRV_OPT_SUPRESS_OPTION_BC & nes_drv_opt)
			) {
		options = (union all_known_options *)&optionsbuffer[optionssize];
		options->as_base.optionnum = OPTION_NUMBER_WRITE0;
		options->as_base.length = sizeof(struct option_base);
		optionssize += sizeof(struct option_base);
		/* we need the size to be a multiple of 4 */
		options = (union all_known_options *)&optionsbuffer[optionssize];
		options->as_end = 1;
		optionssize += 1;
		options = (union all_known_options *)&optionsbuffer[optionssize];
		options->as_end = 1;
		optionssize += 1;
	}

	options = (union all_known_options *)&optionsbuffer[optionssize];
	options->as_end = OPTION_NUMBER_END;
	optionssize += 1;

	skb = get_free_pkt(cm_node);
	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	if (sendack)
		flags |= SET_ACK;

	form_cm_frame(skb, cm_node, optionsbuffer, optionssize, NULL, 0, flags);
	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);

	return ret;
}


/**
 * send_reset
 */
static int send_reset(struct nes_cm_node *cm_node)
{
	int ret;
	struct sk_buff *skb = get_free_pkt(cm_node);
	int flags = SET_RST | SET_ACK;

	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	add_ref_cm_node(cm_node);
	form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, flags);
	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 0, 1);

	return ret;
}


/**
 * send_ack
 */
static int send_ack(struct nes_cm_node *cm_node)
{
	int ret;
	struct sk_buff *skb = get_free_pkt(cm_node);

	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, SET_ACK);
	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 0, 0);

	return ret;
}


/**
 * send_fin
 */
static int send_fin(struct nes_cm_node *cm_node, struct sk_buff *skb)
{
	int ret;

	/* if we didn't get a frame get one */
	if (!skb)
		skb = get_free_pkt(cm_node);

	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, SET_ACK | SET_FIN);
	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);

	return ret;
}


/**
 * get_free_pkt
 */
static struct sk_buff *get_free_pkt(struct nes_cm_node *cm_node)
{
	struct sk_buff *skb, *new_skb;

	/* check to see if we need to repopulate the free tx pkt queue */
	if (skb_queue_len(&cm_node->cm_core->tx_free_list) < NES_CM_FREE_PKT_LO_WATERMARK) {
		while (skb_queue_len(&cm_node->cm_core->tx_free_list) <
				cm_node->cm_core->free_tx_pkt_max) {
			/* replace the frame we took, we won't get it back */
			new_skb = dev_alloc_skb(cm_node->cm_core->mtu);
			BUG_ON(!new_skb);
			/* add a replacement frame to the free tx list head */
			skb_queue_head(&cm_node->cm_core->tx_free_list, new_skb);
		}
	}

	skb = skb_dequeue(&cm_node->cm_core->tx_free_list);

	return skb;
}


/**
 * make_hashkey - generate hash key from node tuple
 */
static inline int make_hashkey(u16 loc_port, nes_addr_t loc_addr, u16 rem_port,
		nes_addr_t rem_addr)
{
	u32 hashkey = 0;

	hashkey = loc_addr + rem_addr + loc_port + rem_port;
	hashkey = (hashkey % NES_CM_HASHTABLE_SIZE);

	return hashkey;
}


/**
 * find_node - find a cm node that matches the reference cm node
 */
static struct nes_cm_node *find_node(struct nes_cm_core *cm_core,
		u16 rem_port, nes_addr_t rem_addr, u16 loc_port, nes_addr_t loc_addr)
{
	unsigned long flags;
	u32 hashkey;
	struct list_head *list_pos;
	struct list_head *hte;
	struct nes_cm_node *cm_node;

	/* make a hash index key for this packet */
	hashkey = make_hashkey(loc_port, loc_addr, rem_port, rem_addr);

	/* get a handle on the hte */
	hte = &cm_core->connected_nodes;

	nes_debug(NES_DBG_CM, "Searching for an owner node:%x:%x from core %p->%p\n",
			loc_addr, loc_port, cm_core, hte);

	/* walk list and find cm_node associated with this session ID */
	spin_lock_irqsave(&cm_core->ht_lock, flags);
	list_for_each(list_pos, hte) {
		cm_node = container_of(list_pos, struct nes_cm_node, list);
		/* compare quad, return node handle if a match */
		nes_debug(NES_DBG_CM, "finding node %x:%x =? %x:%x ^ %x:%x =? %x:%x\n",
				cm_node->loc_addr, cm_node->loc_port,
				loc_addr, loc_port,
				cm_node->rem_addr, cm_node->rem_port,
				rem_addr, rem_port);
		if ((cm_node->loc_addr == loc_addr) && (cm_node->loc_port == loc_port) &&
				(cm_node->rem_addr == rem_addr) && (cm_node->rem_port == rem_port)) {
			add_ref_cm_node(cm_node);
			spin_unlock_irqrestore(&cm_core->ht_lock, flags);
			return cm_node;
		}
	}
	spin_unlock_irqrestore(&cm_core->ht_lock, flags);

	/* no owner node */
	return NULL;
}


/**
 * find_listener - find a cm node listening on this addr-port pair
 */
static struct nes_cm_listener *find_listener(struct nes_cm_core *cm_core,
		nes_addr_t dst_addr, u16 dst_port, enum nes_cm_listener_state listener_state)
{
	unsigned long flags;
	struct list_head *listen_list;
	struct nes_cm_listener *listen_node;

	/* walk list and find cm_node associated with this session ID */
	spin_lock_irqsave(&cm_core->listen_list_lock, flags);
	list_for_each(listen_list, &cm_core->listen_list.list) {
		listen_node = container_of(listen_list, struct nes_cm_listener, list);
		/* compare node pair, return node handle if a match */
		if (((listen_node->loc_addr == dst_addr) ||
				listen_node->loc_addr == 0x00000000) &&
				(listen_node->loc_port == dst_port) &&
				(listener_state & listen_node->listener_state)) {
			atomic_inc(&listen_node->ref_count);
			spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
			return listen_node;
		}
	}
	spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);

	nes_debug(NES_DBG_CM, "Unable to find listener- %x:%x\n",
			dst_addr, dst_port);

	/* no listener */
	return NULL;
}


/**
 * add_hte_node - add a cm node to the hash table
 */
static int add_hte_node(struct nes_cm_core *cm_core, struct nes_cm_node *cm_node)
{
	unsigned long flags;
	u32 hashkey;
	struct list_head *hte;

	if (!cm_node || !cm_core)
		return -EINVAL;

	nes_debug(NES_DBG_CM, "Adding Node to Active Connection HT\n");

	/* first, make an index into our hash table */
	hashkey = make_hashkey(cm_node->loc_port, cm_node->loc_addr,
			cm_node->rem_port, cm_node->rem_addr);
	cm_node->hashkey = hashkey;

	spin_lock_irqsave(&cm_core->ht_lock, flags);

	/* get a handle on the hash table element (list head for this slot) */
	hte = &cm_core->connected_nodes;
	list_add_tail(&cm_node->list, hte);
	atomic_inc(&cm_core->ht_node_cnt);

	spin_unlock_irqrestore(&cm_core->ht_lock, flags);

	return 0;
}


/**
 * mini_cm_dec_refcnt_listen
 */
static int mini_cm_dec_refcnt_listen(struct nes_cm_core *cm_core,
		struct nes_cm_listener *listener, int free_hanging_nodes)
{
	int ret = 1;
	unsigned long flags;
	spin_lock_irqsave(&cm_core->listen_list_lock, flags);
	if (!atomic_dec_return(&listener->ref_count)) {
		list_del(&listener->list);

		/* decrement our listen node count */
		atomic_dec(&cm_core->listen_node_cnt);

		spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);

		if (listener->nesvnic) {
			nes_manage_apbvt(listener->nesvnic, listener->loc_port,
					PCI_FUNC(listener->nesvnic->nesdev->pcidev->devfn), NES_MANAGE_APBVT_DEL);
		}

		nes_debug(NES_DBG_CM, "destroying listener (%p)\n", listener);

		kfree(listener);
		listener = NULL;
		ret = 0;
		cm_listens_destroyed++;
	} else {
		spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
	}
	if (listener) {
		if (atomic_read(&listener->pend_accepts_cnt) > 0)
			nes_debug(NES_DBG_CM, "destroying listener (%p)"
					" with non-zero pending accepts=%u\n",
					listener, atomic_read(&listener->pend_accepts_cnt));
	}

	return ret;
}


/**
 * mini_cm_del_listen
 */
static int mini_cm_del_listen(struct nes_cm_core *cm_core,
		struct nes_cm_listener *listener)
{
	listener->listener_state = NES_CM_LISTENER_PASSIVE_STATE;
	listener->cm_id = NULL; /* going to be destroyed pretty soon */
	return mini_cm_dec_refcnt_listen(cm_core, listener, 1);
}


/**
 * mini_cm_accelerated
 */
static inline int mini_cm_accelerated(struct nes_cm_core *cm_core,
		struct nes_cm_node *cm_node)
{
	u32 was_timer_set;
	cm_node->accelerated = 1;

	if (cm_node->accept_pend) {
		BUG_ON(!cm_node->listener);
		atomic_dec(&cm_node->listener->pend_accepts_cnt);
		BUG_ON(atomic_read(&cm_node->listener->pend_accepts_cnt) < 0);
	}

	was_timer_set = timer_pending(&cm_core->tcp_timer);
	if (!was_timer_set) {
		cm_core->tcp_timer.expires = jiffies + NES_SHORT_TIME;
		add_timer(&cm_core->tcp_timer);
	}

	return 0;
}


/**
 * nes_addr_send_arp
 */
static void nes_addr_send_arp(u32 dst_ip)
{
	struct rtable *rt;
	struct flowi fl;

	memset(&fl, 0, sizeof fl);
	fl.nl_u.ip4_u.daddr = htonl(dst_ip);
	if (ip_route_output_key(&init_net, &rt, &fl)) {
		printk("%s: ip_route_output_key failed for 0x%08X\n",
				__FUNCTION__, dst_ip);
		return;
	}

	neigh_event_send(rt->u.dst.neighbour, NULL);
	ip_rt_put(rt);
}


/**
 * make_cm_node - create a new instance of a cm node
 */
static struct nes_cm_node *make_cm_node(struct nes_cm_core *cm_core,
		struct nes_vnic *nesvnic, struct nes_cm_info *cm_info,
		struct nes_cm_listener *listener)
{
	struct nes_cm_node *cm_node;
	struct timespec ts;
	int arpindex = 0;
	struct nes_device *nesdev;
	struct nes_adapter *nesadapter;

	/* create an hte and cm_node for this instance */
	cm_node = kzalloc(sizeof(*cm_node), GFP_ATOMIC);
	if (!cm_node)
		return NULL;

	/* set our node specific transport info */
	cm_node->loc_addr = cm_info->loc_addr;
	cm_node->rem_addr = cm_info->rem_addr;
	cm_node->loc_port = cm_info->loc_port;
	cm_node->rem_port = cm_info->rem_port;
	cm_node->send_write0 = send_first;
	nes_debug(NES_DBG_CM, "Make node addresses : loc = %x:%x, rem = %x:%x\n",
			cm_node->loc_addr, cm_node->loc_port, cm_node->rem_addr, cm_node->rem_port);
	cm_node->listener = listener;
	cm_node->netdev = nesvnic->netdev;
	cm_node->cm_id = cm_info->cm_id;
	memcpy(cm_node->loc_mac, nesvnic->netdev->dev_addr, ETH_ALEN);

	nes_debug(NES_DBG_CM, "listener=%p, cm_id=%p\n",
			cm_node->listener, cm_node->cm_id);

	INIT_LIST_HEAD(&cm_node->retrans_list);
	spin_lock_init(&cm_node->retrans_list_lock);
	INIT_LIST_HEAD(&cm_node->recv_list);
	spin_lock_init(&cm_node->recv_list_lock);

	cm_node->loopbackpartner = NULL;
	atomic_set(&cm_node->ref_count, 1);
	/* associate our parent CM core */
	cm_node->cm_core = cm_core;
	cm_node->tcp_cntxt.loc_id = NES_CM_DEF_LOCAL_ID;
	cm_node->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;
	cm_node->tcp_cntxt.rcv_wnd = NES_CM_DEFAULT_RCV_WND_SCALED >>
			NES_CM_DEFAULT_RCV_WND_SCALE;
	ts = current_kernel_time();
	cm_node->tcp_cntxt.loc_seq_num = htonl(ts.tv_nsec);
	cm_node->tcp_cntxt.mss = nesvnic->max_frame_size - sizeof(struct iphdr) -
			sizeof(struct tcphdr) - ETH_HLEN - VLAN_HLEN;
	cm_node->tcp_cntxt.rcv_nxt = 0;
	/* get a unique session ID , add thread_id to an upcounter to handle race */
	atomic_inc(&cm_core->node_cnt);
	atomic_inc(&cm_core->session_id);
	cm_node->session_id = (u32)(atomic_read(&cm_core->session_id) + current->tgid);
	cm_node->conn_type = cm_info->conn_type;
	cm_node->apbvt_set = 0;
	cm_node->accept_pend = 0;

	cm_node->nesvnic = nesvnic;
	/* get some device handles, for arp lookup */
	nesdev = nesvnic->nesdev;
	nesadapter = nesdev->nesadapter;

	cm_node->loopbackpartner = NULL;
	/* get the mac addr for the remote node */
	arpindex = nes_arp_table(nesdev, cm_node->rem_addr, NULL, NES_ARP_RESOLVE);
	if (arpindex < 0) {
		kfree(cm_node);
		nes_addr_send_arp(cm_info->rem_addr);
		return NULL;
	}

	/* copy the mac addr to node context */
	memcpy(cm_node->rem_mac, nesadapter->arp_table[arpindex].mac_addr, ETH_ALEN);
	nes_debug(NES_DBG_CM, "Remote mac addr from arp table:%02x,"
			" %02x, %02x, %02x, %02x, %02x\n",
			cm_node->rem_mac[0], cm_node->rem_mac[1],
			cm_node->rem_mac[2], cm_node->rem_mac[3],
			cm_node->rem_mac[4], cm_node->rem_mac[5]);

	add_hte_node(cm_core, cm_node);
	atomic_inc(&cm_nodes_created);

	return cm_node;
}


/**
 * add_ref_cm_node - destroy an instance of a cm node
 */
static int add_ref_cm_node(struct nes_cm_node *cm_node)
{
	atomic_inc(&cm_node->ref_count);
	return 0;
}


/**
 * rem_ref_cm_node - destroy an instance of a cm node
 */
static int rem_ref_cm_node(struct nes_cm_core *cm_core,
		struct nes_cm_node *cm_node)
{
	unsigned long flags, qplockflags;
	struct nes_timer_entry *send_entry;
	struct nes_timer_entry *recv_entry;
	struct iw_cm_id *cm_id;
	struct list_head *list_core, *list_node_temp;
	struct nes_qp *nesqp;

	if (!cm_node)
		return -EINVAL;

	spin_lock_irqsave(&cm_node->cm_core->ht_lock, flags);
	if (atomic_dec_return(&cm_node->ref_count)) {
		spin_unlock_irqrestore(&cm_node->cm_core->ht_lock, flags);
		return 0;
	}
	list_del(&cm_node->list);
	atomic_dec(&cm_core->ht_node_cnt);
	spin_unlock_irqrestore(&cm_node->cm_core->ht_lock, flags);

	/* if the node is destroyed before connection was accelerated */
	if (!cm_node->accelerated && cm_node->accept_pend) {
		BUG_ON(!cm_node->listener);
		atomic_dec(&cm_node->listener->pend_accepts_cnt);
		BUG_ON(atomic_read(&cm_node->listener->pend_accepts_cnt) < 0);
	}

	spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
	list_for_each_safe(list_core, list_node_temp, &cm_node->retrans_list) {
		send_entry = container_of(list_core, struct nes_timer_entry, list);
		list_del(&send_entry->list);
		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
		dev_kfree_skb_any(send_entry->skb);
		kfree(send_entry);
		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
		continue;
	}
	spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);

	spin_lock_irqsave(&cm_node->recv_list_lock, flags);
	list_for_each_safe(list_core, list_node_temp, &cm_node->recv_list) {
		recv_entry = container_of(list_core, struct nes_timer_entry, list);
		list_del(&recv_entry->list);
		cm_id = cm_node->cm_id;
		spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
		if (recv_entry->type == NES_TIMER_TYPE_CLOSE) {
			nesqp = (struct nes_qp *)recv_entry->skb;
			spin_lock_irqsave(&nesqp->lock, qplockflags);
			if (nesqp->cm_id) {
				nes_debug(NES_DBG_CM, "QP%u: cm_id = %p: ****** HIT A NES_TIMER_TYPE_CLOSE"
						" with something to do!!! ******\n",
						nesqp->hwqp.qp_id, cm_id);
				nesqp->hw_tcp_state = NES_AEQE_TCP_STATE_CLOSED;
				nesqp->last_aeq = NES_AEQE_AEID_RESET_SENT;
				nesqp->ibqp_state = IB_QPS_ERR;
				spin_unlock_irqrestore(&nesqp->lock, qplockflags);
				nes_cm_disconn(nesqp);
			} else {
				spin_unlock_irqrestore(&nesqp->lock, qplockflags);
				nes_debug(NES_DBG_CM, "QP%u: cm_id = %p: ****** HIT A NES_TIMER_TYPE_CLOSE"
						" with nothing to do!!! ******\n",
						nesqp->hwqp.qp_id, cm_id);
				nes_rem_ref(&nesqp->ibqp);
			}
			cm_id->rem_ref(cm_id);
		} else if (recv_entry->type == NES_TIMER_TYPE_RECV) {
			dev_kfree_skb_any(recv_entry->skb);
		}
		kfree(recv_entry);
		spin_lock_irqsave(&cm_node->recv_list_lock, flags);
	}
	spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);

	if (cm_node->listener) {
		mini_cm_dec_refcnt_listen(cm_core, cm_node->listener, 0);
	} else {
		if (cm_node->apbvt_set && cm_node->nesvnic) {
			nes_manage_apbvt(cm_node->nesvnic, cm_node->loc_port,
					PCI_FUNC(cm_node->nesvnic->nesdev->pcidev->devfn),
					NES_MANAGE_APBVT_DEL);
		}
	}

	kfree(cm_node);
	atomic_dec(&cm_core->node_cnt);
	atomic_inc(&cm_nodes_destroyed);

	return 0;
}


/**
 * process_options
 */
static int process_options(struct nes_cm_node *cm_node, u8 *optionsloc, u32 optionsize, u32 syn_packet)
{
	u32 tmp;
	u32 offset = 0;
	union all_known_options *all_options;
	char got_mss_option = 0;

	while (offset < optionsize) {
		all_options = (union all_known_options *)(optionsloc + offset);
		switch (all_options->as_base.optionnum) {
			case OPTION_NUMBER_END:
				offset = optionsize;
				break;
			case OPTION_NUMBER_NONE:
				offset += 1;
				continue;
			case OPTION_NUMBER_MSS:
				nes_debug(NES_DBG_CM, "%s: MSS Length: %d Offset: %d Size: %d\n",
						__FUNCTION__,
						all_options->as_mss.length, offset, optionsize);
				got_mss_option = 1;
				if (all_options->as_mss.length != 4) {
					return 1;
				} else {
					tmp = ntohs(all_options->as_mss.mss);
					if (tmp > 0 && tmp < cm_node->tcp_cntxt.mss)
						cm_node->tcp_cntxt.mss = tmp;
				}
				break;
			case OPTION_NUMBER_WINDOW_SCALE:
				cm_node->tcp_cntxt.snd_wscale = all_options->as_windowscale.shiftcount;
				break;
			case OPTION_NUMBER_WRITE0:
				cm_node->send_write0 = 1;
				break;
			default:
				nes_debug(NES_DBG_CM, "TCP Option not understood: %x\n",
						all_options->as_base.optionnum);
				break;
		}
		offset += all_options->as_base.length;
	}
	if ((!got_mss_option) && (syn_packet))
		cm_node->tcp_cntxt.mss = NES_CM_DEFAULT_MSS;
	return 0;
}


/**
 * process_packet
 */
static int process_packet(struct nes_cm_node *cm_node, struct sk_buff *skb,
			  struct nes_cm_core *cm_core)
{
	int optionsize;
	int datasize;
	int ret = 0;
	struct tcphdr *tcph = tcp_hdr(skb);
	u32 inc_sequence;
	if (cm_node->state == NES_CM_STATE_SYN_SENT && tcph->syn) {
		inc_sequence = ntohl(tcph->seq);
		cm_node->tcp_cntxt.rcv_nxt = inc_sequence;
	}

	if ((!tcph) || (cm_node->state == NES_CM_STATE_TSA)) {
		BUG_ON(!tcph);
		atomic_inc(&cm_accel_dropped_pkts);
		return -1;
	}

	if (tcph->rst) {
		atomic_inc(&cm_resets_recvd);
		nes_debug(NES_DBG_CM, "Received Reset, cm_node = %p, state = %u. refcnt=%d\n",
				cm_node, cm_node->state, atomic_read(&cm_node->ref_count));
		switch (cm_node->state) {
			case NES_CM_STATE_LISTENING:
				rem_ref_cm_node(cm_core, cm_node);
				break;
			case NES_CM_STATE_TSA:
			case NES_CM_STATE_CLOSED:
				break;
			case NES_CM_STATE_SYN_RCVD:
					nes_debug(NES_DBG_CM, "Received a reset for local 0x%08X:%04X,"
							" remote 0x%08X:%04X, node state = %u\n",
							cm_node->loc_addr, cm_node->loc_port,
							cm_node->rem_addr, cm_node->rem_port,
							cm_node->state);
				rem_ref_cm_node(cm_core, cm_node);
				break;
			case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
			case NES_CM_STATE_ESTABLISHED:
			case NES_CM_STATE_MPAREQ_SENT:
			default:
					nes_debug(NES_DBG_CM, "Received a reset for local 0x%08X:%04X,"
							" remote 0x%08X:%04X, node state = %u refcnt=%d\n",
							cm_node->loc_addr, cm_node->loc_port,
							cm_node->rem_addr, cm_node->rem_port,
							cm_node->state, atomic_read(&cm_node->ref_count));
				// create event
				cm_node->state = NES_CM_STATE_CLOSED;

				create_event(cm_node, NES_CM_EVENT_ABORTED);
				break;

		}
		return -1;
	}

	optionsize = (tcph->doff << 2) - sizeof(struct tcphdr);

	skb_pull(skb, ip_hdr(skb)->ihl << 2);
	skb_pull(skb, tcph->doff << 2);

	datasize = skb->len;
	inc_sequence = ntohl(tcph->seq);
	nes_debug(NES_DBG_CM, "datasize = %u, sequence = 0x%08X, ack_seq = 0x%08X,"
			" rcv_nxt = 0x%08X Flags: %s %s.\n",
			datasize, inc_sequence, ntohl(tcph->ack_seq),
			cm_node->tcp_cntxt.rcv_nxt, (tcph->syn ? "SYN":""),
			(tcph->ack ? "ACK":""));

	if (!tcph->syn && (inc_sequence != cm_node->tcp_cntxt.rcv_nxt)
		) {
		nes_debug(NES_DBG_CM, "dropping packet, datasize = %u, sequence = 0x%08X,"
				" ack_seq = 0x%08X, rcv_nxt = 0x%08X Flags: %s.\n",
				datasize, inc_sequence, ntohl(tcph->ack_seq),
				cm_node->tcp_cntxt.rcv_nxt, (tcph->ack ? "ACK":""));
		if (cm_node->state == NES_CM_STATE_LISTENING) {
			rem_ref_cm_node(cm_core, cm_node);
		}
		return -1;
	}

		cm_node->tcp_cntxt.rcv_nxt = inc_sequence + datasize;


	if (optionsize) {
		u8 *optionsloc = (u8 *)&tcph[1];
		if (process_options(cm_node, optionsloc, optionsize, (u32)tcph->syn)) {
			nes_debug(NES_DBG_CM, "%s: Node %p, Sending RESET\n", __FUNCTION__, cm_node);
			send_reset(cm_node);
			if (cm_node->state != NES_CM_STATE_SYN_SENT)
			rem_ref_cm_node(cm_core, cm_node);
			return 0;
		}
	} else if (tcph->syn)
		cm_node->tcp_cntxt.mss = NES_CM_DEFAULT_MSS;

	cm_node->tcp_cntxt.snd_wnd = ntohs(tcph->window) <<
			cm_node->tcp_cntxt.snd_wscale;

	if (cm_node->tcp_cntxt.snd_wnd > cm_node->tcp_cntxt.max_snd_wnd) {
		cm_node->tcp_cntxt.max_snd_wnd = cm_node->tcp_cntxt.snd_wnd;
	}

	if (tcph->ack) {
		cm_node->tcp_cntxt.rem_ack_num = ntohl(tcph->ack_seq);
		switch (cm_node->state) {
			case NES_CM_STATE_SYN_RCVD:
			case NES_CM_STATE_SYN_SENT:
				/* read and stash current sequence number */
				if (cm_node->tcp_cntxt.rem_ack_num != cm_node->tcp_cntxt.loc_seq_num) {
					nes_debug(NES_DBG_CM, "ERROR - cm_node->tcp_cntxt.rem_ack_num !="
							" cm_node->tcp_cntxt.loc_seq_num\n");
					send_reset(cm_node);
					return 0;
				}
				if (cm_node->state == NES_CM_STATE_SYN_SENT)
					cm_node->state = NES_CM_STATE_ONE_SIDE_ESTABLISHED;
				else {
						cm_node->state = NES_CM_STATE_ESTABLISHED;
				}
				break;
			case NES_CM_STATE_LAST_ACK:
				cm_node->state = NES_CM_STATE_CLOSED;
				break;
			case NES_CM_STATE_FIN_WAIT1:
				cm_node->state = NES_CM_STATE_FIN_WAIT2;
				break;
			case NES_CM_STATE_CLOSING:
				cm_node->state = NES_CM_STATE_TIME_WAIT;
				/* need to schedule this to happen in 2MSL timeouts */
				cm_node->state = NES_CM_STATE_CLOSED;
				break;
			case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
			case NES_CM_STATE_ESTABLISHED:
			case NES_CM_STATE_MPAREQ_SENT:
			case NES_CM_STATE_CLOSE_WAIT:
			case NES_CM_STATE_TIME_WAIT:
			case NES_CM_STATE_CLOSED:
				break;
			case NES_CM_STATE_LISTENING:
				nes_debug(NES_DBG_CM, "Received an ACK on a listening port (SYN %d)\n", tcph->syn);
				cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
				send_reset(cm_node);
				/* send_reset bumps refcount, this should have been a new node */
				rem_ref_cm_node(cm_core, cm_node);
				return -1;
				break;
			case NES_CM_STATE_TSA:
				nes_debug(NES_DBG_CM, "Received a packet with the ack bit set while in TSA state\n");
				break;
			case NES_CM_STATE_UNKNOWN:
			case NES_CM_STATE_INITED:
			case NES_CM_STATE_ACCEPTING:
			case NES_CM_STATE_FIN_WAIT2:
			default:
				nes_debug(NES_DBG_CM, "Received ack from unknown state: %x\n",
						cm_node->state);
				send_reset(cm_node);
				break;
		}
	}

	if (tcph->syn) {
		if (cm_node->state == NES_CM_STATE_LISTENING) {
			/* do not exceed backlog */
			atomic_inc(&cm_node->listener->pend_accepts_cnt);
			if (atomic_read(&cm_node->listener->pend_accepts_cnt) >
					cm_node->listener->backlog) {
				nes_debug(NES_DBG_CM, "drop syn due to backlog pressure \n");
				cm_backlog_drops++;
				atomic_dec(&cm_node->listener->pend_accepts_cnt);
				rem_ref_cm_node(cm_core, cm_node);
				return 0;
			}
			cm_node->accept_pend = 1;

		}
		if (datasize == 0)
			cm_node->tcp_cntxt.rcv_nxt ++;

		if (cm_node->state == NES_CM_STATE_LISTENING) {
			cm_node->state = NES_CM_STATE_SYN_RCVD;
			send_syn(cm_node, 1);
		}
		if (cm_node->state == NES_CM_STATE_ONE_SIDE_ESTABLISHED) {
			cm_node->state = NES_CM_STATE_ESTABLISHED;
			/* send final handshake ACK */
			ret = send_ack(cm_node);
			if (ret < 0)
				return ret;

				cm_node->state = NES_CM_STATE_MPAREQ_SENT;
				ret = send_mpa_request(cm_node);
				if (ret < 0)
					return ret;
		}
	}

	if (tcph->fin) {
		cm_node->tcp_cntxt.rcv_nxt++;
		switch (cm_node->state) {
			case NES_CM_STATE_SYN_RCVD:
			case NES_CM_STATE_SYN_SENT:
			case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
			case NES_CM_STATE_ESTABLISHED:
			case NES_CM_STATE_ACCEPTING:
			case NES_CM_STATE_MPAREQ_SENT:
				cm_node->state = NES_CM_STATE_CLOSE_WAIT;
				cm_node->state = NES_CM_STATE_LAST_ACK;
				ret = send_fin(cm_node, NULL);
				break;
			case NES_CM_STATE_FIN_WAIT1:
				cm_node->state = NES_CM_STATE_CLOSING;
				ret = send_ack(cm_node);
				break;
			case NES_CM_STATE_FIN_WAIT2:
				cm_node->state = NES_CM_STATE_TIME_WAIT;
				cm_node->tcp_cntxt.loc_seq_num ++;
				ret = send_ack(cm_node);
				/* need to schedule this to happen in 2MSL timeouts */
				cm_node->state = NES_CM_STATE_CLOSED;
				break;
			case NES_CM_STATE_CLOSE_WAIT:
			case NES_CM_STATE_LAST_ACK:
			case NES_CM_STATE_CLOSING:
			case NES_CM_STATE_TSA:
			default:
				nes_debug(NES_DBG_CM, "Received a fin while in %x state\n",
						cm_node->state);
				ret = -EINVAL;
				break;
		}
	}

	if (datasize) {
		u8 *dataloc = skb->data;
		/* figure out what state we are in and handle transition to next state */
		switch (cm_node->state) {
			case NES_CM_STATE_LISTENING:
			case NES_CM_STATE_SYN_RCVD:
			case NES_CM_STATE_SYN_SENT:
			case NES_CM_STATE_FIN_WAIT1:
			case NES_CM_STATE_FIN_WAIT2:
			case NES_CM_STATE_CLOSE_WAIT:
			case NES_CM_STATE_LAST_ACK:
			case NES_CM_STATE_CLOSING:
				break;
			case  NES_CM_STATE_MPAREQ_SENT:
				/* recv the mpa res frame, ret=frame len (incl priv data) */
				ret = parse_mpa(cm_node, dataloc, datasize);
				if (ret < 0)
					break;
				/* set the req frame payload len in skb */
				/* we are done handling this state, set node to a TSA state */
				cm_node->state = NES_CM_STATE_TSA;
				send_ack(cm_node);
				create_event(cm_node, NES_CM_EVENT_CONNECTED);
				break;

			case  NES_CM_STATE_ESTABLISHED:
				/* we are expecting an MPA req frame */
				ret = parse_mpa(cm_node, dataloc, datasize);
				if (ret < 0) {
					break;
				}
				cm_node->state = NES_CM_STATE_TSA;
				send_ack(cm_node);
				/* we got a valid MPA request, create an event */
				create_event(cm_node, NES_CM_EVENT_MPA_REQ);
				break;
			case  NES_CM_STATE_TSA:
				handle_exception_pkt(cm_node, skb);
				break;
			case NES_CM_STATE_UNKNOWN:
			case NES_CM_STATE_INITED:
			default:
				ret = -1;
		}
	}

	return ret;
}


/**
 * mini_cm_listen - create a listen node with params
 */
static struct nes_cm_listener *mini_cm_listen(struct nes_cm_core *cm_core,
		struct nes_vnic *nesvnic, struct nes_cm_info *cm_info)
{
	struct nes_cm_listener *listener;
	unsigned long flags;

	nes_debug(NES_DBG_CM, "Search for 0x%08x : 0x%04x\n",
		cm_info->loc_addr, cm_info->loc_port);

	/* cannot have multiple matching listeners */
	listener = find_listener(cm_core, htonl(cm_info->loc_addr),
			htons(cm_info->loc_port), NES_CM_LISTENER_EITHER_STATE);
	if (listener && listener->listener_state == NES_CM_LISTENER_ACTIVE_STATE) {
		/* find automatically incs ref count ??? */
		atomic_dec(&listener->ref_count);
		nes_debug(NES_DBG_CM, "Not creating listener since it already exists\n");
		return NULL;
	}

	if (!listener) {
		/* create a CM listen node (1/2 node to compare incoming traffic to) */
		listener = kzalloc(sizeof(*listener), GFP_ATOMIC);
		if (!listener) {
			nes_debug(NES_DBG_CM, "Not creating listener memory allocation failed\n");
			return NULL;
		}

		memset(listener, 0, sizeof(struct nes_cm_listener));
		listener->loc_addr = htonl(cm_info->loc_addr);
		listener->loc_port = htons(cm_info->loc_port);
		listener->reused_node = 0;

		atomic_set(&listener->ref_count, 1);
	}
	/* pasive case */
	/* find already inc'ed the ref count */
	else {
		listener->reused_node = 1;
	}

	listener->cm_id = cm_info->cm_id;
	atomic_set(&listener->pend_accepts_cnt, 0);
	listener->cm_core = cm_core;
	listener->nesvnic = nesvnic;
	atomic_inc(&cm_core->node_cnt);
	atomic_inc(&cm_core->session_id);

	listener->session_id = (u32)(atomic_read(&cm_core->session_id) + current->tgid);
	listener->conn_type = cm_info->conn_type;
	listener->backlog = cm_info->backlog;
	listener->listener_state = NES_CM_LISTENER_ACTIVE_STATE;

	if (!listener->reused_node) {
		spin_lock_irqsave(&cm_core->listen_list_lock, flags);
		list_add(&listener->list, &cm_core->listen_list.list);
		spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
		atomic_inc(&cm_core->listen_node_cnt);
	}

	nes_debug(NES_DBG_CM, "Api - listen(): addr=0x%08X, port=0x%04x,"
			" listener = %p, backlog = %d, cm_id = %p.\n",
			cm_info->loc_addr, cm_info->loc_port,
			listener, listener->backlog, listener->cm_id);

	return listener;
}


/**
 * mini_cm_connect - make a connection node with params
 */
static struct nes_cm_node *mini_cm_connect(struct nes_cm_core *cm_core,
					   struct nes_vnic *nesvnic,
					   struct ietf_mpa_frame *mpa_frame,
					   struct nes_cm_info *cm_info)
{
	int ret = 0;
	struct nes_cm_node *cm_node;
	struct nes_cm_listener *loopbackremotelistener;
	struct nes_cm_node *loopbackremotenode;
	struct nes_cm_info loopback_cm_info;

	u16 mpa_frame_size = sizeof(struct ietf_mpa_frame) +
			ntohs(mpa_frame->priv_data_len);

	cm_info->loc_addr = htonl(cm_info->loc_addr);
	cm_info->rem_addr = htonl(cm_info->rem_addr);
	cm_info->loc_port = htons(cm_info->loc_port);
	cm_info->rem_port = htons(cm_info->rem_port);

	/* create a CM connection node */
	cm_node = make_cm_node(cm_core, nesvnic, cm_info, NULL);
	if (!cm_node)
		return NULL;

	// set our node side to client (active) side
	cm_node->tcp_cntxt.client = 1;
	cm_node->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;

	if (cm_info->loc_addr == cm_info->rem_addr) {
		loopbackremotelistener = find_listener(cm_core, cm_node->rem_addr,
				cm_node->rem_port, NES_CM_LISTENER_ACTIVE_STATE);
		if (loopbackremotelistener == NULL) {
			create_event(cm_node, NES_CM_EVENT_ABORTED);
		} else {
			atomic_inc(&cm_loopbacks);
			loopback_cm_info = *cm_info;
			loopback_cm_info.loc_port = cm_info->rem_port;
			loopback_cm_info.rem_port = cm_info->loc_port;
			loopback_cm_info.cm_id = loopbackremotelistener->cm_id;
			loopbackremotenode = make_cm_node(cm_core, nesvnic, &loopback_cm_info,
					loopbackremotelistener);
			loopbackremotenode->loopbackpartner = cm_node;
			loopbackremotenode->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;
			cm_node->loopbackpartner = loopbackremotenode;
			memcpy(loopbackremotenode->mpa_frame_buf, &mpa_frame->priv_data,
					mpa_frame_size);
			loopbackremotenode->mpa_frame_size = mpa_frame_size -
					sizeof(struct ietf_mpa_frame);

			// we are done handling this state, set node to a TSA state
			cm_node->state = NES_CM_STATE_TSA;
			cm_node->tcp_cntxt.rcv_nxt = loopbackremotenode->tcp_cntxt.loc_seq_num;
			loopbackremotenode->tcp_cntxt.rcv_nxt = cm_node->tcp_cntxt.loc_seq_num;
			cm_node->tcp_cntxt.max_snd_wnd = loopbackremotenode->tcp_cntxt.rcv_wnd;
			loopbackremotenode->tcp_cntxt.max_snd_wnd = cm_node->tcp_cntxt.rcv_wnd;
			cm_node->tcp_cntxt.snd_wnd = loopbackremotenode->tcp_cntxt.rcv_wnd;
			loopbackremotenode->tcp_cntxt.snd_wnd = cm_node->tcp_cntxt.rcv_wnd;
			cm_node->tcp_cntxt.snd_wscale = loopbackremotenode->tcp_cntxt.rcv_wscale;
			loopbackremotenode->tcp_cntxt.snd_wscale = cm_node->tcp_cntxt.rcv_wscale;

			create_event(loopbackremotenode, NES_CM_EVENT_MPA_REQ);
		}
		return cm_node;
	}

	/* set our node side to client (active) side */
	cm_node->tcp_cntxt.client = 1;
	/* init our MPA frame ptr */
	memcpy(&cm_node->mpa_frame, mpa_frame, mpa_frame_size);
	cm_node->mpa_frame_size = mpa_frame_size;

	/* send a syn and goto syn sent state */
	cm_node->state = NES_CM_STATE_SYN_SENT;
	ret = send_syn(cm_node, 0);

	nes_debug(NES_DBG_CM, "Api - connect(): dest addr=0x%08X, port=0x%04x,"
			" cm_node=%p, cm_id = %p.\n",
			cm_node->rem_addr, cm_node->rem_port, cm_node, cm_node->cm_id);

	return cm_node;
}


/**
 * mini_cm_accept - accept a connection
 * This function is never called
 */
static int mini_cm_accept(struct nes_cm_core *cm_core, struct ietf_mpa_frame *mpa_frame,
			  struct nes_cm_node *cm_node)
{
	return 0;
}


/**
 * mini_cm_reject - reject and teardown a connection
 */
static int mini_cm_reject(struct nes_cm_core *cm_core,
			  struct ietf_mpa_frame *mpa_frame,
			  struct nes_cm_node *cm_node)
{
	int ret = 0;
	struct sk_buff *skb;
	u16 mpa_frame_size = sizeof(struct ietf_mpa_frame) +
			ntohs(mpa_frame->priv_data_len);

	skb = get_free_pkt(cm_node);
	if (!skb) {
		nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
		return -1;
	}

	/* send an MPA Request frame */
	form_cm_frame(skb, cm_node, NULL, 0, mpa_frame, mpa_frame_size, SET_ACK | SET_FIN);
	ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);

	cm_node->state = NES_CM_STATE_CLOSED;
	ret = send_fin(cm_node, NULL);

	if (ret < 0) {
		printk(KERN_INFO PFX "failed to send MPA Reply (reject)\n");
		return ret;
	}

	return ret;
}


/**
 * mini_cm_close
 */
static int mini_cm_close(struct nes_cm_core *cm_core, struct nes_cm_node *cm_node)
{
	int ret = 0;

	if (!cm_core || !cm_node)
		return -EINVAL;

	switch (cm_node->state) {
		/* if passed in node is null, create a reference key node for node search */
		/* check if we found an owner node for this pkt */
		case NES_CM_STATE_SYN_RCVD:
		case NES_CM_STATE_SYN_SENT:
		case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
		case NES_CM_STATE_ESTABLISHED:
		case NES_CM_STATE_ACCEPTING:
		case NES_CM_STATE_MPAREQ_SENT:
			cm_node->state = NES_CM_STATE_FIN_WAIT1;
			send_fin(cm_node, NULL);
			break;
		case NES_CM_STATE_CLOSE_WAIT:
			cm_node->state = NES_CM_STATE_LAST_ACK;
			send_fin(cm_node, NULL);
			break;
		case NES_CM_STATE_FIN_WAIT1:
		case NES_CM_STATE_FIN_WAIT2:
		case NES_CM_STATE_LAST_ACK:
		case NES_CM_STATE_TIME_WAIT:
		case NES_CM_STATE_CLOSING:
			ret = -1;
			break;
		case NES_CM_STATE_LISTENING:
		case NES_CM_STATE_UNKNOWN:
		case NES_CM_STATE_INITED:
		case NES_CM_STATE_CLOSED:
		case NES_CM_STATE_TSA:
			ret = rem_ref_cm_node(cm_core, cm_node);
			break;
	}
	cm_node->cm_id = NULL;
	return ret;
}


/**
 * recv_pkt - recv an ETHERNET packet, and process it through CM
 * node state machine
 */
static int mini_cm_recv_pkt(struct nes_cm_core *cm_core, struct nes_vnic *nesvnic,
			    struct sk_buff *skb)
{
	struct nes_cm_node *cm_node = NULL;
	struct nes_cm_listener *listener = NULL;
	struct iphdr *iph;
	struct tcphdr *tcph;
	struct nes_cm_info nfo;
	int ret = 0;

	if (!skb || skb->len < sizeof(struct iphdr) + sizeof(struct tcphdr)) {
		ret = -EINVAL;
		goto out;
	}

	iph = (struct iphdr *)skb->data;
	tcph = (struct tcphdr *)(skb->data + sizeof(struct iphdr));
	skb_reset_network_header(skb);
	skb_set_transport_header(skb, sizeof(*tcph));
	skb->len = ntohs(iph->tot_len);

	nfo.loc_addr = ntohl(iph->daddr);
	nfo.loc_port = ntohs(tcph->dest);
	nfo.rem_addr = ntohl(iph->saddr);
	nfo.rem_port = ntohs(tcph->source);

	nes_debug(NES_DBG_CM, "Received packet: dest=0x%08X:0x%04X src=0x%08X:0x%04X\n",
			iph->daddr, tcph->dest, iph->saddr, tcph->source);

	/* note: this call is going to increment cm_node ref count */
	cm_node = find_node(cm_core,
			nfo.rem_port, nfo.rem_addr,
			nfo.loc_port, nfo.loc_addr);

	if (!cm_node) {
		listener = find_listener(cm_core, nfo.loc_addr, nfo.loc_port,
				NES_CM_LISTENER_ACTIVE_STATE);
		if (listener) {
			nfo.cm_id = listener->cm_id;
			nfo.conn_type = listener->conn_type;
		} else {
			nfo.cm_id = NULL;
			nfo.conn_type = 0;
		}

		cm_node = make_cm_node(cm_core, nesvnic, &nfo, listener);
		if (!cm_node) {
			nes_debug(NES_DBG_CM, "Unable to allocate node\n");
			if (listener) {
				nes_debug(NES_DBG_CM, "unable to allocate node and decrementing listener refcount\n");
				atomic_dec(&listener->ref_count);
			}
			ret = -1;
			goto out;
		}
		if (!listener) {
			nes_debug(NES_DBG_CM, "Packet found for unknown port %x refcnt=%d\n",
					nfo.loc_port, atomic_read(&cm_node->ref_count));
			if (!tcph->rst) {
				nes_debug(NES_DBG_CM, "Packet found for unknown port=%d"
						" rem_port=%d refcnt=%d\n",
						nfo.loc_port, nfo.rem_port, atomic_read(&cm_node->ref_count));

				cm_node->tcp_cntxt.rcv_nxt = ntohl(tcph->seq);
				cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
				send_reset(cm_node);
			}
			rem_ref_cm_node(cm_core, cm_node);
			ret = -1;
			goto out;
		}
		add_ref_cm_node(cm_node);
		cm_node->state = NES_CM_STATE_LISTENING;
	}

	nes_debug(NES_DBG_CM, "Processing Packet for node %p, data = (%p):\n",
			cm_node, skb->data);
	process_packet(cm_node, skb, cm_core);

	rem_ref_cm_node(cm_core, cm_node);
	out:
	if (skb)
		dev_kfree_skb_any(skb);
	return ret;
}


/**
 * nes_cm_alloc_core - allocate a top level instance of a cm core
 */
static struct nes_cm_core *nes_cm_alloc_core(void)
{
	int i;

	struct nes_cm_core *cm_core;
	struct sk_buff *skb = NULL;

	/* setup the CM core */
	/* alloc top level core control structure */
	cm_core = kzalloc(sizeof(*cm_core), GFP_KERNEL);
	if (!cm_core)
		return NULL;

	INIT_LIST_HEAD(&cm_core->connected_nodes);
	init_timer(&cm_core->tcp_timer);
	cm_core->tcp_timer.function = nes_cm_timer_tick;

	cm_core->mtu   = NES_CM_DEFAULT_MTU;
	cm_core->state = NES_CM_STATE_INITED;
	cm_core->free_tx_pkt_max = NES_CM_DEFAULT_FREE_PKTS;

	atomic_set(&cm_core->session_id, 0);
	atomic_set(&cm_core->events_posted, 0);

	/* init the packet lists */
	skb_queue_head_init(&cm_core->tx_free_list);

	for (i = 0; i < NES_CM_DEFAULT_FRAME_CNT; i++) {
		skb = dev_alloc_skb(cm_core->mtu);
		if (!skb) {
			kfree(cm_core);
			return NULL;
		}
		/* add 'raw' skb to free frame list */
		skb_queue_head(&cm_core->tx_free_list, skb);
	}

	cm_core->api = &nes_cm_api;

	spin_lock_init(&cm_core->ht_lock);
	spin_lock_init(&cm_core->listen_list_lock);

	INIT_LIST_HEAD(&cm_core->listen_list.list);

	nes_debug(NES_DBG_CM, "Init CM Core completed -- cm_core=%p\n", cm_core);

	nes_debug(NES_DBG_CM, "Enable QUEUE EVENTS\n");
	cm_core->event_wq = create_singlethread_workqueue("nesewq");
	cm_core->post_event = nes_cm_post_event;
	nes_debug(NES_DBG_CM, "Enable QUEUE DISCONNECTS\n");
	cm_core->disconn_wq = create_singlethread_workqueue("nesdwq");

	print_core(cm_core);
	return cm_core;
}


/**
 * mini_cm_dealloc_core - deallocate a top level instance of a cm core
 */
static int mini_cm_dealloc_core(struct nes_cm_core *cm_core)
{
	nes_debug(NES_DBG_CM, "De-Alloc CM Core (%p)\n", cm_core);

	if (!cm_core)
		return -EINVAL;

	barrier();

	if (timer_pending(&cm_core->tcp_timer)) {
		del_timer(&cm_core->tcp_timer);
	}

	destroy_workqueue(cm_core->event_wq);
	destroy_workqueue(cm_core->disconn_wq);
	nes_debug(NES_DBG_CM, "\n");
	kfree(cm_core);

	return 0;
}


/**
 * mini_cm_get
 */
static int mini_cm_get(struct nes_cm_core *cm_core)
{
	return cm_core->state;
}


/**
 * mini_cm_set
 */
static int mini_cm_set(struct nes_cm_core *cm_core, u32 type, u32 value)
{
	int ret = 0;

	switch (type) {
		case NES_CM_SET_PKT_SIZE:
			cm_core->mtu = value;
			break;
		case NES_CM_SET_FREE_PKT_Q_SIZE:
			cm_core->free_tx_pkt_max = value;
			break;
		default:
			/* unknown set option */
			ret = -EINVAL;
	}

	return ret;
}


/**
 * nes_cm_init_tsa_conn setup HW; MPA frames must be
 * successfully exchanged when this is called
 */
static int nes_cm_init_tsa_conn(struct nes_qp *nesqp, struct nes_cm_node *cm_node)
{
	int ret = 0;

	if (!nesqp)
		return -EINVAL;

	nesqp->nesqp_context->misc |= cpu_to_le32(NES_QPCONTEXT_MISC_IPV4 |
			NES_QPCONTEXT_MISC_NO_NAGLE | NES_QPCONTEXT_MISC_DO_NOT_FRAG |
			NES_QPCONTEXT_MISC_DROS);

	if (cm_node->tcp_cntxt.snd_wscale || cm_node->tcp_cntxt.rcv_wscale)
		nesqp->nesqp_context->misc |= cpu_to_le32(NES_QPCONTEXT_MISC_WSCALE);

	nesqp->nesqp_context->misc2 |= cpu_to_le32(64 << NES_QPCONTEXT_MISC2_TTL_SHIFT);

	nesqp->nesqp_context->mss |= cpu_to_le32(((u32)cm_node->tcp_cntxt.mss) << 16);

	nesqp->nesqp_context->tcp_state_flow_label |= cpu_to_le32(
			(u32)NES_QPCONTEXT_TCPSTATE_EST << NES_QPCONTEXT_TCPFLOW_TCP_STATE_SHIFT);

	nesqp->nesqp_context->pd_index_wscale |= cpu_to_le32(
			(cm_node->tcp_cntxt.snd_wscale << NES_QPCONTEXT_PDWSCALE_SND_WSCALE_SHIFT) &
			NES_QPCONTEXT_PDWSCALE_SND_WSCALE_MASK);

	nesqp->nesqp_context->pd_index_wscale |= cpu_to_le32(
			(cm_node->tcp_cntxt.rcv_wscale << NES_QPCONTEXT_PDWSCALE_RCV_WSCALE_SHIFT) &
			NES_QPCONTEXT_PDWSCALE_RCV_WSCALE_MASK);

	nesqp->nesqp_context->keepalive = cpu_to_le32(0x80);
	nesqp->nesqp_context->ts_recent = 0;
	nesqp->nesqp_context->ts_age = 0;
	nesqp->nesqp_context->snd_nxt = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
	nesqp->nesqp_context->snd_wnd = cpu_to_le32(cm_node->tcp_cntxt.snd_wnd);
	nesqp->nesqp_context->rcv_nxt = cpu_to_le32(cm_node->tcp_cntxt.rcv_nxt);
	nesqp->nesqp_context->rcv_wnd = cpu_to_le32(cm_node->tcp_cntxt.rcv_wnd <<
			cm_node->tcp_cntxt.rcv_wscale);
	nesqp->nesqp_context->snd_max = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
	nesqp->nesqp_context->snd_una = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
	nesqp->nesqp_context->srtt = 0;
	nesqp->nesqp_context->rttvar = cpu_to_le32(0x6);
	nesqp->nesqp_context->ssthresh = cpu_to_le32(0x3FFFC000);
	nesqp->nesqp_context->cwnd = cpu_to_le32(2*cm_node->tcp_cntxt.mss);
	nesqp->nesqp_context->snd_wl1 = cpu_to_le32(cm_node->tcp_cntxt.rcv_nxt);
	nesqp->nesqp_context->snd_wl2 = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
	nesqp->nesqp_context->max_snd_wnd = cpu_to_le32(cm_node->tcp_cntxt.max_snd_wnd);

	nes_debug(NES_DBG_CM, "QP%u: rcv_nxt = 0x%08X, snd_nxt = 0x%08X,"
			" Setting MSS to %u, PDWscale = 0x%08X, rcv_wnd = %u, context misc = 0x%08X.\n",
			nesqp->hwqp.qp_id, le32_to_cpu(nesqp->nesqp_context->rcv_nxt),
			le32_to_cpu(nesqp->nesqp_context->snd_nxt),
			cm_node->tcp_cntxt.mss, le32_to_cpu(nesqp->nesqp_context->pd_index_wscale),
			le32_to_cpu(nesqp->nesqp_context->rcv_wnd),
			le32_to_cpu(nesqp->nesqp_context->misc));
	nes_debug(NES_DBG_CM, "  snd_wnd  = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->snd_wnd));
	nes_debug(NES_DBG_CM, "  snd_cwnd = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->cwnd));
	nes_debug(NES_DBG_CM, "  max_swnd = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->max_snd_wnd));

	nes_debug(NES_DBG_CM, "Change cm_node state to TSA\n");
	cm_node->state = NES_CM_STATE_TSA;

	return ret;
}


/**
 * nes_cm_disconn
 */
int nes_cm_disconn(struct nes_qp *nesqp)
{
	unsigned long flags;

	spin_lock_irqsave(&nesqp->lock, flags);
	if (nesqp->disconn_pending == 0) {
		nesqp->disconn_pending++;
		spin_unlock_irqrestore(&nesqp->lock, flags);
		/* nes_add_ref(&nesqp->ibqp); */
		/* init our disconnect work element, to */
		INIT_WORK(&nesqp->disconn_work, nes_disconnect_worker);

		queue_work(g_cm_core->disconn_wq, &nesqp->disconn_work);
	} else {
		spin_unlock_irqrestore(&nesqp->lock, flags);
		nes_rem_ref(&nesqp->ibqp);
	}

	return 0;
}


/**
 * nes_disconnect_worker
 */
static void nes_disconnect_worker(struct work_struct *work)
{
	struct nes_qp *nesqp = container_of(work, struct nes_qp, disconn_work);

	nes_debug(NES_DBG_CM, "processing AEQE id 0x%04X for QP%u.\n",
			nesqp->last_aeq, nesqp->hwqp.qp_id);
	nes_cm_disconn_true(nesqp);
}


/**
 * nes_cm_disconn_true
 */
static int nes_cm_disconn_true(struct nes_qp *nesqp)
{
	unsigned long flags;
	int ret = 0;
	struct iw_cm_id *cm_id;
	struct iw_cm_event cm_event;
	struct nes_vnic *nesvnic;
	u16 last_ae;
	u8 original_hw_tcp_state;
	u8 original_ibqp_state;
	u8 issued_disconnect_reset = 0;

	if (!nesqp) {
		nes_debug(NES_DBG_CM, "disconnect_worker nesqp is NULL\n");
		return -1;
	}

	spin_lock_irqsave(&nesqp->lock, flags);
	cm_id = nesqp->cm_id;
	/* make sure we havent already closed this connection */
	if (!cm_id) {
		nes_debug(NES_DBG_CM, "QP%u disconnect_worker cmid is NULL\n",
				nesqp->hwqp.qp_id);
		spin_unlock_irqrestore(&nesqp->lock, flags);
		nes_rem_ref(&nesqp->ibqp);
		return -1;
	}

	nesvnic = to_nesvnic(nesqp->ibqp.device);
	nes_debug(NES_DBG_CM, "Disconnecting QP%u\n", nesqp->hwqp.qp_id);

	original_hw_tcp_state = nesqp->hw_tcp_state;
	original_ibqp_state   = nesqp->ibqp_state;
	last_ae = nesqp->last_aeq;


	nes_debug(NES_DBG_CM, "set ibqp_state=%u\n", nesqp->ibqp_state);

	if ((nesqp->cm_id) && (cm_id->event_handler)) {
		if ((original_hw_tcp_state == NES_AEQE_TCP_STATE_CLOSE_WAIT) ||
				((original_ibqp_state == IB_QPS_RTS) &&
				(last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET))) {
			atomic_inc(&cm_disconnects);
			cm_event.event = IW_CM_EVENT_DISCONNECT;
			if (last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET) {
				issued_disconnect_reset = 1;
				cm_event.status = IW_CM_EVENT_STATUS_RESET;
				nes_debug(NES_DBG_CM, "Generating a CM Disconnect Event (status reset) for "
						" QP%u, cm_id = %p. \n",
						nesqp->hwqp.qp_id, cm_id);
			} else {
				cm_event.status = IW_CM_EVENT_STATUS_OK;
			}

			cm_event.local_addr = cm_id->local_addr;
			cm_event.remote_addr = cm_id->remote_addr;
			cm_event.private_data = NULL;
			cm_event.private_data_len = 0;

			nes_debug(NES_DBG_CM, "Generating a CM Disconnect Event for "
					" QP%u, SQ Head = %u, SQ Tail = %u. cm_id = %p, refcount = %u.\n",
					nesqp->hwqp.qp_id,
					nesqp->hwqp.sq_head, nesqp->hwqp.sq_tail, cm_id,
					atomic_read(&nesqp->refcount));

			spin_unlock_irqrestore(&nesqp->lock, flags);
			ret = cm_id->event_handler(cm_id, &cm_event);
			if (ret)
				nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
			spin_lock_irqsave(&nesqp->lock, flags);
		}

		nesqp->disconn_pending = 0;
		/* There might have been another AE while the lock was released */
		original_hw_tcp_state = nesqp->hw_tcp_state;
		original_ibqp_state   = nesqp->ibqp_state;
		last_ae = nesqp->last_aeq;

		if ((issued_disconnect_reset == 0) && (nesqp->cm_id) &&
				((original_hw_tcp_state == NES_AEQE_TCP_STATE_CLOSED) ||
				 (original_hw_tcp_state == NES_AEQE_TCP_STATE_TIME_WAIT) ||
				 (last_ae == NES_AEQE_AEID_RDMAP_ROE_BAD_LLP_CLOSE) ||
				 (last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET))) {
			atomic_inc(&cm_closes);
			nesqp->cm_id = NULL;
			nesqp->in_disconnect = 0;
			spin_unlock_irqrestore(&nesqp->lock, flags);
			nes_disconnect(nesqp, 1);

			cm_id->provider_data = nesqp;
			/* Send up the close complete event */
			cm_event.event = IW_CM_EVENT_CLOSE;
			cm_event.status = IW_CM_EVENT_STATUS_OK;
			cm_event.provider_data = cm_id->provider_data;
			cm_event.local_addr = cm_id->local_addr;
			cm_event.remote_addr = cm_id->remote_addr;
			cm_event.private_data = NULL;
			cm_event.private_data_len = 0;

			ret = cm_id->event_handler(cm_id, &cm_event);
			if (ret) {
				nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
			}

			cm_id->rem_ref(cm_id);

			spin_lock_irqsave(&nesqp->lock, flags);
			if (nesqp->flush_issued == 0) {
				nesqp->flush_issued = 1;
				spin_unlock_irqrestore(&nesqp->lock, flags);
				flush_wqes(nesvnic->nesdev, nesqp, NES_CQP_FLUSH_RQ, 1);
			} else {
				spin_unlock_irqrestore(&nesqp->lock, flags);
			}

			/* This reference is from either ModifyQP or the AE processing,
					there is still a race here with modifyqp */
			nes_rem_ref(&nesqp->ibqp);

		} else {
			cm_id = nesqp->cm_id;
			spin_unlock_irqrestore(&nesqp->lock, flags);
			/* check to see if the inbound reset beat the outbound reset */
			if ((!cm_id) && (last_ae==NES_AEQE_AEID_RESET_SENT)) {
				nes_debug(NES_DBG_CM, "QP%u: Decing refcount due to inbound reset"
						" beating the outbound reset.\n",
						nesqp->hwqp.qp_id);
				nes_rem_ref(&nesqp->ibqp);
			}
		}
	} else {
		nesqp->disconn_pending = 0;
		spin_unlock_irqrestore(&nesqp->lock, flags);
	}
	nes_rem_ref(&nesqp->ibqp);

	return 0;
}


/**
 * nes_disconnect
 */
static int nes_disconnect(struct nes_qp *nesqp, int abrupt)
{
	int ret = 0;
	struct nes_vnic *nesvnic;
	struct nes_device *nesdev;

	nesvnic = to_nesvnic(nesqp->ibqp.device);
	if (!nesvnic)
		return -EINVAL;

	nesdev = nesvnic->nesdev;

	nes_debug(NES_DBG_CM, "netdev refcnt = %u.\n",
			atomic_read(&nesvnic->netdev->refcnt));

	if (nesqp->active_conn) {

		/* indicate this connection is NOT active */
		nesqp->active_conn = 0;
	} else {
		/* Need to free the Last Streaming Mode Message */
		if (nesqp->ietf_frame) {
			pci_free_consistent(nesdev->pcidev,
					nesqp->private_data_len+sizeof(struct ietf_mpa_frame),
					nesqp->ietf_frame, nesqp->ietf_frame_pbase);
		}
	}

	/* close the CM node down if it is still active */
	if (nesqp->cm_node) {
		nes_debug(NES_DBG_CM, "Call close API\n");

		g_cm_core->api->close(g_cm_core, nesqp->cm_node);
		nesqp->cm_node = NULL;
	}

	return ret;
}


/**
 * nes_accept
 */
int nes_accept(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
{
	u64 u64temp;
	struct ib_qp *ibqp;
	struct nes_qp *nesqp;
	struct nes_vnic *nesvnic;
	struct nes_device *nesdev;
	struct nes_cm_node *cm_node;
	struct nes_adapter *adapter;
	struct ib_qp_attr attr;
	struct iw_cm_event cm_event;
	struct nes_hw_qp_wqe *wqe;
	struct nes_v4_quad nes_quad;
	u32 crc_value;
	int ret;

	ibqp = nes_get_qp(cm_id->device, conn_param->qpn);
	if (!ibqp)
		return -EINVAL;

	/* get all our handles */
	nesqp = to_nesqp(ibqp);
	nesvnic = to_nesvnic(nesqp->ibqp.device);
	nesdev = nesvnic->nesdev;
	adapter = nesdev->nesadapter;

	nes_debug(NES_DBG_CM, "nesvnic=%p, netdev=%p, %s\n",
			nesvnic, nesvnic->netdev, nesvnic->netdev->name);

	/* since this is from a listen, we were able to put node handle into cm_id */
	cm_node = (struct nes_cm_node *)cm_id->provider_data;

	/* associate the node with the QP */
	nesqp->cm_node = (void *)cm_node;

	nes_debug(NES_DBG_CM, "QP%u, cm_node=%p, jiffies = %lu\n",
			nesqp->hwqp.qp_id, cm_node, jiffies);
	atomic_inc(&cm_accepts);

	nes_debug(NES_DBG_CM, "netdev refcnt = %u.\n",
			atomic_read(&nesvnic->netdev->refcnt));

		/* allocate the ietf frame and space for private data */
		nesqp->ietf_frame = pci_alloc_consistent(nesdev->pcidev,
				sizeof(struct ietf_mpa_frame) + conn_param->private_data_len,
				&nesqp->ietf_frame_pbase);

		if (!nesqp->ietf_frame) {
			nes_debug(NES_DBG_CM, "Unable to allocate memory for private data\n");
			return -ENOMEM;
		}


		/* setup the MPA frame */
		nesqp->private_data_len = conn_param->private_data_len;
		memcpy(nesqp->ietf_frame->key, IEFT_MPA_KEY_REP, IETF_MPA_KEY_SIZE);

		memcpy(nesqp->ietf_frame->priv_data, conn_param->private_data,
				conn_param->private_data_len);

		nesqp->ietf_frame->priv_data_len = cpu_to_be16(conn_param->private_data_len);
		nesqp->ietf_frame->rev = mpa_version;
		nesqp->ietf_frame->flags = IETF_MPA_FLAGS_CRC;

		/* setup our first outgoing iWarp send WQE (the IETF frame response) */
		wqe = &nesqp->hwqp.sq_vbase[0];

		if (cm_id->remote_addr.sin_addr.s_addr != cm_id->local_addr.sin_addr.s_addr) {
			u64temp = (unsigned long)nesqp;
			u64temp |= NES_SW_CONTEXT_ALIGN>>1;
			set_wqe_64bit_value(wqe->wqe_words, NES_IWARP_SQ_WQE_COMP_CTX_LOW_IDX,
					    u64temp);
			wqe->wqe_words[NES_IWARP_SQ_WQE_MISC_IDX] =
					cpu_to_le32(NES_IWARP_SQ_WQE_STREAMING | NES_IWARP_SQ_WQE_WRPDU);
			wqe->wqe_words[NES_IWARP_SQ_WQE_TOTAL_PAYLOAD_IDX] =
					cpu_to_le32(conn_param->private_data_len + sizeof(struct ietf_mpa_frame));
			wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_LOW_IDX] =
					cpu_to_le32((u32)nesqp->ietf_frame_pbase);
			wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_HIGH_IDX] =
					cpu_to_le32((u32)((u64)nesqp->ietf_frame_pbase >> 32));
			wqe->wqe_words[NES_IWARP_SQ_WQE_LENGTH0_IDX] =
					cpu_to_le32(conn_param->private_data_len + sizeof(struct ietf_mpa_frame));
			wqe->wqe_words[NES_IWARP_SQ_WQE_STAG0_IDX] = 0;

			nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32(
					NES_QPCONTEXT_ORDIRD_LSMM_PRESENT | NES_QPCONTEXT_ORDIRD_WRPDU);
		} else {
			nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((NES_QPCONTEXT_ORDIRD_LSMM_PRESENT |
					NES_QPCONTEXT_ORDIRD_WRPDU | NES_QPCONTEXT_ORDIRD_ALSMM));
		}
		nesqp->skip_lsmm = 1;


	/* Cache the cm_id in the qp */
	nesqp->cm_id = cm_id;
	cm_node->cm_id = cm_id;

	/*  nesqp->cm_node = (void *)cm_id->provider_data; */
	cm_id->provider_data = nesqp;
	nesqp->active_conn   = 0;

	nes_cm_init_tsa_conn(nesqp, cm_node);

	nesqp->nesqp_context->tcpPorts[0] = cpu_to_le16(ntohs(cm_id->local_addr.sin_port));
	nesqp->nesqp_context->tcpPorts[1] = cpu_to_le16(ntohs(cm_id->remote_addr.sin_port));
	nesqp->nesqp_context->ip0 = cpu_to_le32(ntohl(cm_id->remote_addr.sin_addr.s_addr));

	nesqp->nesqp_context->misc2 |= cpu_to_le32(
			(u32)PCI_FUNC(nesdev->pcidev->devfn) << NES_QPCONTEXT_MISC2_SRC_IP_SHIFT);

	nesqp->nesqp_context->arp_index_vlan |= cpu_to_le32(
			nes_arp_table(nesdev, le32_to_cpu(nesqp->nesqp_context->ip0), NULL,
			NES_ARP_RESOLVE) << 16);

	nesqp->nesqp_context->ts_val_delta = cpu_to_le32(
			jiffies - nes_read_indexed(nesdev, NES_IDX_TCP_NOW));

	nesqp->nesqp_context->ird_index = cpu_to_le32(nesqp->hwqp.qp_id);

	nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32(
			((u32)1 << NES_QPCONTEXT_ORDIRD_IWARP_MODE_SHIFT));
	nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((u32)conn_param->ord);

	memset(&nes_quad, 0, sizeof(nes_quad));
	nes_quad.DstIpAdrIndex = cpu_to_le32((u32)PCI_FUNC(nesdev->pcidev->devfn) << 24);
	nes_quad.SrcIpadr      = cm_id->remote_addr.sin_addr.s_addr;
	nes_quad.TcpPorts[0]   = cm_id->remote_addr.sin_port;
	nes_quad.TcpPorts[1]   = cm_id->local_addr.sin_port;

	/* Produce hash key */
	crc_value = get_crc_value(&nes_quad);
	nesqp->hte_index = cpu_to_be32(crc_value ^ 0xffffffff);
	nes_debug(NES_DBG_CM, "HTE Index = 0x%08X, CRC = 0x%08X\n",
			nesqp->hte_index, nesqp->hte_index & adapter->hte_index_mask);

	nesqp->hte_index &= adapter->hte_index_mask;
	nesqp->nesqp_context->hte_index = cpu_to_le32(nesqp->hte_index);

	cm_node->cm_core->api->accelerated(cm_node->cm_core, cm_node);

	nes_debug(NES_DBG_CM, "QP%u, Destination IP = 0x%08X:0x%04X, local = 0x%08X:0x%04X,"
			" rcv_nxt=0x%08X, snd_nxt=0x%08X, mpa + private data length=%zu.\n",
			nesqp->hwqp.qp_id,
			ntohl(cm_id->remote_addr.sin_addr.s_addr),
			ntohs(cm_id->remote_addr.sin_port),
			ntohl(cm_id->local_addr.sin_addr.s_addr),
			ntohs(cm_id->local_addr.sin_port),
			le32_to_cpu(nesqp->nesqp_context->rcv_nxt),
			le32_to_cpu(nesqp->nesqp_context->snd_nxt),
			conn_param->private_data_len+sizeof(struct ietf_mpa_frame));

	attr.qp_state = IB_QPS_RTS;
	nes_modify_qp(&nesqp->ibqp, &attr, IB_QP_STATE, NULL);

	/* notify OF layer that accept event was successfull */
	cm_id->add_ref(cm_id);

	cm_event.event = IW_CM_EVENT_ESTABLISHED;
	cm_event.status = IW_CM_EVENT_STATUS_ACCEPTED;
	cm_event.provider_data = (void *)nesqp;
	cm_event.local_addr = cm_id->local_addr;
	cm_event.remote_addr = cm_id->remote_addr;
	cm_event.private_data = NULL;
	cm_event.private_data_len = 0;
	ret = cm_id->event_handler(cm_id, &cm_event);
	if (cm_node->loopbackpartner) {
		cm_node->loopbackpartner->mpa_frame_size = nesqp->private_data_len;
		/* copy entire MPA frame to our cm_node's frame */
		memcpy(cm_node->loopbackpartner->mpa_frame_buf, nesqp->ietf_frame->priv_data,
			   nesqp->private_data_len);
		create_event(cm_node->loopbackpartner, NES_CM_EVENT_CONNECTED);
	}
	if (ret)
		printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
				__FUNCTION__, __LINE__, ret);

	return 0;
}


/**
 * nes_reject
 */
int nes_reject(struct iw_cm_id *cm_id, const void *pdata, u8 pdata_len)
{
	struct nes_cm_node *cm_node;
	struct nes_cm_core *cm_core;

	atomic_inc(&cm_rejects);
	cm_node = (struct nes_cm_node *) cm_id->provider_data;
	cm_core = cm_node->cm_core;
	cm_node->mpa_frame_size = sizeof(struct ietf_mpa_frame) + pdata_len;

	strcpy(&cm_node->mpa_frame.key[0], IEFT_MPA_KEY_REP);
	memcpy(&cm_node->mpa_frame.priv_data, pdata, pdata_len);

	cm_node->mpa_frame.priv_data_len = cpu_to_be16(pdata_len);
	cm_node->mpa_frame.rev = mpa_version;
	cm_node->mpa_frame.flags = IETF_MPA_FLAGS_CRC | IETF_MPA_FLAGS_REJECT;

	cm_core->api->reject(cm_core, &cm_node->mpa_frame, cm_node);

	return 0;
}


/**
 * nes_connect
 * setup and launch cm connect node
 */
int nes_connect(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
{
	struct ib_qp *ibqp;
	struct nes_qp *nesqp;
	struct nes_vnic *nesvnic;
	struct nes_device *nesdev;
	struct nes_cm_node *cm_node;
	struct nes_cm_info cm_info;

	ibqp = nes_get_qp(cm_id->device, conn_param->qpn);
	if (!ibqp)
		return -EINVAL;
	nesqp = to_nesqp(ibqp);
	if (!nesqp)
		return -EINVAL;
	nesvnic = to_nesvnic(nesqp->ibqp.device);
	if (!nesvnic)
		return -EINVAL;
	nesdev  = nesvnic->nesdev;
	if (!nesdev)
		return -EINVAL;

	atomic_inc(&cm_connects);

	nesqp->ietf_frame = kzalloc(sizeof(struct ietf_mpa_frame) +
			conn_param->private_data_len, GFP_KERNEL);
	if (!nesqp->ietf_frame)
		return -ENOMEM;

	/* set qp as having an active connection */
	nesqp->active_conn = 1;

	nes_debug(NES_DBG_CM, "QP%u, Destination IP = 0x%08X:0x%04X, local = 0x%08X:0x%04X.\n",
			nesqp->hwqp.qp_id,
			ntohl(cm_id->remote_addr.sin_addr.s_addr),
			ntohs(cm_id->remote_addr.sin_port),
			ntohl(cm_id->local_addr.sin_addr.s_addr),
			ntohs(cm_id->local_addr.sin_port));

	/* cache the cm_id in the qp */
	nesqp->cm_id = cm_id;

	cm_id->provider_data = nesqp;

	/* copy the private data */
	if (conn_param->private_data_len) {
		memcpy(nesqp->ietf_frame->priv_data, conn_param->private_data,
				conn_param->private_data_len);
	}

	nesqp->private_data_len = conn_param->private_data_len;
	nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((u32)conn_param->ord);
	nes_debug(NES_DBG_CM, "requested ord = 0x%08X.\n", (u32)conn_param->ord);
	nes_debug(NES_DBG_CM, "mpa private data len =%u\n", conn_param->private_data_len);

	strcpy(&nesqp->ietf_frame->key[0], IEFT_MPA_KEY_REQ);
	nesqp->ietf_frame->flags = IETF_MPA_FLAGS_CRC;
	nesqp->ietf_frame->rev = IETF_MPA_VERSION;
	nesqp->ietf_frame->priv_data_len = htons(conn_param->private_data_len);

	if (cm_id->local_addr.sin_addr.s_addr != cm_id->remote_addr.sin_addr.s_addr)
		nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
				PCI_FUNC(nesdev->pcidev->devfn), NES_MANAGE_APBVT_ADD);

	/* set up the connection params for the node */
	cm_info.loc_addr = (cm_id->local_addr.sin_addr.s_addr);
	cm_info.loc_port = (cm_id->local_addr.sin_port);
	cm_info.rem_addr = (cm_id->remote_addr.sin_addr.s_addr);
	cm_info.rem_port = (cm_id->remote_addr.sin_port);
	cm_info.cm_id = cm_id;
	cm_info.conn_type = NES_CM_IWARP_CONN_TYPE;

	cm_id->add_ref(cm_id);
	nes_add_ref(&nesqp->ibqp);

	/* create a connect CM node connection */
	cm_node = g_cm_core->api->connect(g_cm_core, nesvnic, nesqp->ietf_frame, &cm_info);
	if (!cm_node) {
		if (cm_id->local_addr.sin_addr.s_addr != cm_id->remote_addr.sin_addr.s_addr)
			nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
					PCI_FUNC(nesdev->pcidev->devfn), NES_MANAGE_APBVT_DEL);
		nes_rem_ref(&nesqp->ibqp);
		kfree(nesqp->ietf_frame);
		nesqp->ietf_frame = NULL;
		cm_id->rem_ref(cm_id);
		return -ENOMEM;
	}

	cm_node->apbvt_set = 1;
	nesqp->cm_node = cm_node;

	return 0;
}


/**
 * nes_create_listen
 */
int nes_create_listen(struct iw_cm_id *cm_id, int backlog)
{
	struct nes_vnic *nesvnic;
	struct nes_cm_listener *cm_node;
	struct nes_cm_info cm_info;
	struct nes_adapter *adapter;
	int err;


	nes_debug(NES_DBG_CM, "cm_id = %p, local port = 0x%04X.\n",
			cm_id, ntohs(cm_id->local_addr.sin_port));

	nesvnic = to_nesvnic(cm_id->device);
	if (!nesvnic)
		return -EINVAL;
	adapter = nesvnic->nesdev->nesadapter;
	nes_debug(NES_DBG_CM, "nesvnic=%p, netdev=%p, %s\n",
			nesvnic, nesvnic->netdev, nesvnic->netdev->name);

	nes_debug(NES_DBG_CM, "nesvnic->local_ipaddr=0x%08x, sin_addr.s_addr=0x%08x\n",
			nesvnic->local_ipaddr, cm_id->local_addr.sin_addr.s_addr);

	/* setup listen params in our api call struct */
	cm_info.loc_addr = nesvnic->local_ipaddr;
	cm_info.loc_port = cm_id->local_addr.sin_port;
	cm_info.backlog = backlog;
	cm_info.cm_id = cm_id;

	cm_info.conn_type = NES_CM_IWARP_CONN_TYPE;


	cm_node = g_cm_core->api->listen(g_cm_core, nesvnic, &cm_info);
	if (!cm_node) {
		printk("%s[%u] Error returned from listen API call\n",
				__FUNCTION__, __LINE__);
		return -ENOMEM;
	}

	cm_id->provider_data = cm_node;

	if (!cm_node->reused_node) {
		err = nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
				PCI_FUNC(nesvnic->nesdev->pcidev->devfn), NES_MANAGE_APBVT_ADD);
		if (err) {
			printk("nes_manage_apbvt call returned %d.\n", err);
			g_cm_core->api->stop_listener(g_cm_core, (void *)cm_node);
			return err;
		}
		cm_listens_created++;
	}

	cm_id->add_ref(cm_id);
	cm_id->provider_data = (void *)cm_node;


	return 0;
}


/**
 * nes_destroy_listen
 */
int nes_destroy_listen(struct iw_cm_id *cm_id)
{
	if (cm_id->provider_data)
		g_cm_core->api->stop_listener(g_cm_core, cm_id->provider_data);
	else
		nes_debug(NES_DBG_CM, "cm_id->provider_data was NULL\n");

	cm_id->rem_ref(cm_id);

	return 0;
}


/**
 * nes_cm_recv
 */
int nes_cm_recv(struct sk_buff *skb, struct net_device *netdevice)
{
	cm_packets_received++;
	if ((g_cm_core) && (g_cm_core->api)) {
		g_cm_core->api->recv_pkt(g_cm_core, netdev_priv(netdevice), skb);
	} else {
		nes_debug(NES_DBG_CM, "Unable to process packet for CM,"
				" cm is not setup properly.\n");
	}

	return 0;
}


/**
 * nes_cm_start
 * Start and init a cm core module
 */
int nes_cm_start(void)
{
	nes_debug(NES_DBG_CM, "\n");
	/* create the primary CM core, pass this handle to subsequent core inits */
	g_cm_core = nes_cm_alloc_core();
	if (g_cm_core) {
		return 0;
	} else {
		return -ENOMEM;
	}
}


/**
 * nes_cm_stop
 * stop and dealloc all cm core instances
 */
int nes_cm_stop(void)
{
	g_cm_core->api->destroy_cm_core(g_cm_core);
	return 0;
}


/**
 * cm_event_connected
 * handle a connected event, setup QPs and HW
 */
static void cm_event_connected(struct nes_cm_event *event)
{
	u64 u64temp;
	struct nes_qp *nesqp;
	struct nes_vnic *nesvnic;
	struct nes_device *nesdev;
	struct nes_cm_node *cm_node;
	struct nes_adapter *nesadapter;
	struct ib_qp_attr attr;
	struct iw_cm_id *cm_id;
	struct iw_cm_event cm_event;
	struct nes_hw_qp_wqe *wqe;
	struct nes_v4_quad nes_quad;
	u32 crc_value;
	int ret;

	/* get all our handles */
	cm_node = event->cm_node;
	cm_id = cm_node->cm_id;
	nes_debug(NES_DBG_CM, "cm_event_connected - %p - cm_id = %p\n", cm_node, cm_id);
	nesqp = (struct nes_qp *)cm_id->provider_data;
	nesvnic = to_nesvnic(nesqp->ibqp.device);
	nesdev = nesvnic->nesdev;
	nesadapter = nesdev->nesadapter;

	if (nesqp->destroyed) {
		return;
	}
	atomic_inc(&cm_connecteds);
	nes_debug(NES_DBG_CM, "QP%u attempting to connect to  0x%08X:0x%04X on"
			" local port 0x%04X. jiffies = %lu.\n",
			nesqp->hwqp.qp_id,
			ntohl(cm_id->remote_addr.sin_addr.s_addr),
			ntohs(cm_id->remote_addr.sin_port),
			ntohs(cm_id->local_addr.sin_port),
			jiffies);

	nes_cm_init_tsa_conn(nesqp, cm_node);

	/* set the QP tsa context */
	nesqp->nesqp_context->tcpPorts[0] = cpu_to_le16(ntohs(cm_id->local_addr.sin_port));
	nesqp->nesqp_context->tcpPorts[1] = cpu_to_le16(ntohs(cm_id->remote_addr.sin_port));
	nesqp->nesqp_context->ip0 = cpu_to_le32(ntohl(cm_id->remote_addr.sin_addr.s_addr));

	nesqp->nesqp_context->misc2 |= cpu_to_le32(
			(u32)PCI_FUNC(nesdev->pcidev->devfn) << NES_QPCONTEXT_MISC2_SRC_IP_SHIFT);
	nesqp->nesqp_context->arp_index_vlan |= cpu_to_le32(
			nes_arp_table(nesdev, le32_to_cpu(nesqp->nesqp_context->ip0),
			NULL, NES_ARP_RESOLVE) << 16);
	nesqp->nesqp_context->ts_val_delta = cpu_to_le32(
			jiffies - nes_read_indexed(nesdev, NES_IDX_TCP_NOW));
	nesqp->nesqp_context->ird_index = cpu_to_le32(nesqp->hwqp.qp_id);
	nesqp->nesqp_context->ird_ord_sizes |=
			cpu_to_le32((u32)1 << NES_QPCONTEXT_ORDIRD_IWARP_MODE_SHIFT);

	/* Adjust tail for not having a LSMM */
	nesqp->hwqp.sq_tail = 1;

#if defined(NES_SEND_FIRST_WRITE)
		if (cm_node->send_write0) {
			nes_debug(NES_DBG_CM, "Sending first write.\n");
			wqe = &nesqp->hwqp.sq_vbase[0];
			u64temp = (unsigned long)nesqp;
			u64temp |= NES_SW_CONTEXT_ALIGN>>1;
			set_wqe_64bit_value(wqe->wqe_words, NES_IWARP_SQ_WQE_COMP_CTX_LOW_IDX,
					    u64temp);
			wqe->wqe_words[NES_IWARP_SQ_WQE_MISC_IDX] = cpu_to_le32(NES_IWARP_SQ_OP_RDMAW);
			wqe->wqe_words[NES_IWARP_SQ_WQE_TOTAL_PAYLOAD_IDX] = 0;
			wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_LOW_IDX] = 0;
			wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_HIGH_IDX] = 0;
			wqe->wqe_words[NES_IWARP_SQ_WQE_LENGTH0_IDX] = 0;
			wqe->wqe_words[NES_IWARP_SQ_WQE_STAG0_IDX] = 0;

			/* use the reserved spot on the WQ for the extra first WQE */
			nesqp->nesqp_context->ird_ord_sizes &= cpu_to_le32(~(NES_QPCONTEXT_ORDIRD_LSMM_PRESENT |
					NES_QPCONTEXT_ORDIRD_WRPDU | NES_QPCONTEXT_ORDIRD_ALSMM));
			nesqp->skip_lsmm = 1;
			nesqp->hwqp.sq_tail = 0;
			nes_write32(nesdev->regs + NES_WQE_ALLOC,
					(1 << 24) | 0x00800000 | nesqp->hwqp.qp_id);
		}
#endif

	memset(&nes_quad, 0, sizeof(nes_quad));

	nes_quad.DstIpAdrIndex = cpu_to_le32((u32)PCI_FUNC(nesdev->pcidev->devfn) << 24);
	nes_quad.SrcIpadr = cm_id->remote_addr.sin_addr.s_addr;
	nes_quad.TcpPorts[0] = cm_id->remote_addr.sin_port;
	nes_quad.TcpPorts[1] = cm_id->local_addr.sin_port;

	/* Produce hash key */
	crc_value = get_crc_value(&nes_quad);
	nesqp->hte_index = cpu_to_be32(crc_value ^ 0xffffffff);
	nes_debug(NES_DBG_CM, "HTE Index = 0x%08X, After CRC = 0x%08X\n",
			nesqp->hte_index, nesqp->hte_index & nesadapter->hte_index_mask);

	nesqp->hte_index &= nesadapter->hte_index_mask;
	nesqp->nesqp_context->hte_index = cpu_to_le32(nesqp->hte_index);

	nesqp->ietf_frame = &cm_node->mpa_frame;
	nesqp->private_data_len = (u8) cm_node->mpa_frame_size;
	cm_node->cm_core->api->accelerated(cm_node->cm_core, cm_node);

	/* modify QP state to rts */
	attr.qp_state = IB_QPS_RTS;
	nes_modify_qp(&nesqp->ibqp, &attr, IB_QP_STATE, NULL);

	/* notify OF layer we successfully created the requested connection */
	cm_event.event = IW_CM_EVENT_CONNECT_REPLY;
	cm_event.status = IW_CM_EVENT_STATUS_ACCEPTED;
	cm_event.provider_data = cm_id->provider_data;
	cm_event.local_addr.sin_family = AF_INET;
	cm_event.local_addr.sin_port = cm_id->local_addr.sin_port;
	cm_event.remote_addr = cm_id->remote_addr;

		cm_event.private_data = (void *)event->cm_node->mpa_frame_buf;
		cm_event.private_data_len = (u8) event->cm_node->mpa_frame_size;

	cm_event.local_addr.sin_addr.s_addr = event->cm_info.rem_addr;
	ret = cm_id->event_handler(cm_id, &cm_event);
	nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);

	if (ret)
		printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
				__FUNCTION__, __LINE__, ret);
	nes_debug(NES_DBG_CM, "Exiting connect thread for QP%u. jiffies = %lu\n",
			nesqp->hwqp.qp_id, jiffies );

	nes_rem_ref(&nesqp->ibqp);

	return;
}


/**
 * cm_event_connect_error
 */
static void cm_event_connect_error(struct nes_cm_event *event)
{
	struct nes_qp *nesqp;
	struct iw_cm_id *cm_id;
	struct iw_cm_event cm_event;
	/* struct nes_cm_info cm_info; */
	int ret;

	if (!event->cm_node)
		return;

	cm_id = event->cm_node->cm_id;
	if (!cm_id) {
		return;
	}

	nes_debug(NES_DBG_CM, "cm_node=%p, cm_id=%p\n", event->cm_node, cm_id);
	nesqp = cm_id->provider_data;

	if (!nesqp) {
		return;
	}

	/* notify OF layer about this connection error event */
	/* cm_id->rem_ref(cm_id); */
	nesqp->cm_id = NULL;
	cm_id->provider_data = NULL;
	cm_event.event = IW_CM_EVENT_CONNECT_REPLY;
	cm_event.status = IW_CM_EVENT_STATUS_REJECTED;
	cm_event.provider_data = cm_id->provider_data;
	cm_event.local_addr = cm_id->local_addr;
	cm_event.remote_addr = cm_id->remote_addr;
	cm_event.private_data = NULL;
	cm_event.private_data_len = 0;

	nes_debug(NES_DBG_CM, "call CM_EVENT REJECTED, local_addr=%08x, remove_addr=%08x\n",
			cm_event.local_addr.sin_addr.s_addr, cm_event.remote_addr.sin_addr.s_addr);

	ret = cm_id->event_handler(cm_id, &cm_event);
	nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
	if (ret)
		printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
				__FUNCTION__, __LINE__, ret);
	nes_rem_ref(&nesqp->ibqp);
		cm_id->rem_ref(cm_id);

	return;
}


/**
 * cm_event_reset
 */
static void cm_event_reset(struct nes_cm_event *event)
{
	struct nes_qp *nesqp;
	struct iw_cm_id *cm_id;
	struct iw_cm_event cm_event;
	/* struct nes_cm_info cm_info; */
	int ret;

	if (!event->cm_node)
		return;

	if (!event->cm_node->cm_id)
		return;

	cm_id = event->cm_node->cm_id;

	nes_debug(NES_DBG_CM, "%p - cm_id = %p\n", event->cm_node, cm_id);
	nesqp = cm_id->provider_data;

	nesqp->cm_id = NULL;
	/* cm_id->provider_data = NULL; */
	cm_event.event = IW_CM_EVENT_DISCONNECT;
	cm_event.status = IW_CM_EVENT_STATUS_RESET;
	cm_event.provider_data = cm_id->provider_data;
	cm_event.local_addr = cm_id->local_addr;
	cm_event.remote_addr = cm_id->remote_addr;
	cm_event.private_data = NULL;
	cm_event.private_data_len = 0;

	ret = cm_id->event_handler(cm_id, &cm_event);
	nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);


	/* notify OF layer about this connection error event */
	cm_id->rem_ref(cm_id);

	return;
}


/**
 * cm_event_mpa_req
 */
static void cm_event_mpa_req(struct nes_cm_event *event)
{
	struct iw_cm_id   *cm_id;
	struct iw_cm_event cm_event;
	int ret;
	struct nes_cm_node *cm_node;

	cm_node = event->cm_node;
	if (!cm_node)
		return;
	cm_id = cm_node->cm_id;

	atomic_inc(&cm_connect_reqs);
	nes_debug(NES_DBG_CM, "cm_node = %p - cm_id = %p, jiffies = %lu\n",
			cm_node, cm_id, jiffies);

	cm_event.event = IW_CM_EVENT_CONNECT_REQUEST;
	cm_event.status = IW_CM_EVENT_STATUS_OK;
	cm_event.provider_data = (void *)cm_node;

	cm_event.local_addr.sin_family = AF_INET;
	cm_event.local_addr.sin_port = htons(event->cm_info.loc_port);
	cm_event.local_addr.sin_addr.s_addr = htonl(event->cm_info.loc_addr);

	cm_event.remote_addr.sin_family = AF_INET;
	cm_event.remote_addr.sin_port = htons(event->cm_info.rem_port);
	cm_event.remote_addr.sin_addr.s_addr = htonl(event->cm_info.rem_addr);

		cm_event.private_data                = cm_node->mpa_frame_buf;
		cm_event.private_data_len            = (u8) cm_node->mpa_frame_size;

	ret = cm_id->event_handler(cm_id, &cm_event);
	if (ret)
		printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
				__FUNCTION__, __LINE__, ret);

	return;
}


static void nes_cm_event_handler(struct work_struct *);

/**
 * nes_cm_post_event
 * post an event to the cm event handler
 */
static int nes_cm_post_event(struct nes_cm_event *event)
{
	atomic_inc(&event->cm_node->cm_core->events_posted);
	add_ref_cm_node(event->cm_node);
	event->cm_info.cm_id->add_ref(event->cm_info.cm_id);
	INIT_WORK(&event->event_work, nes_cm_event_handler);
	nes_debug(NES_DBG_CM, "queue_work, event=%p\n", event);

	queue_work(event->cm_node->cm_core->event_wq, &event->event_work);

	nes_debug(NES_DBG_CM, "Exit\n");
	return 0;
}


/**
 * nes_cm_event_handler
 * worker function to handle cm events
 * will free instance of nes_cm_event
 */
static void nes_cm_event_handler(struct work_struct *work)
{
	struct nes_cm_event *event = container_of(work, struct nes_cm_event, event_work);
	struct nes_cm_core *cm_core;

	if ((!event) || (!event->cm_node) || (!event->cm_node->cm_core)) {
		return;
	}
	cm_core = event->cm_node->cm_core;
	nes_debug(NES_DBG_CM, "event=%p, event->type=%u, events posted=%u\n",
			event, event->type, atomic_read(&cm_core->events_posted));

	switch (event->type) {
		case NES_CM_EVENT_MPA_REQ:
			cm_event_mpa_req(event);
			nes_debug(NES_DBG_CM, "CM Event: MPA REQUEST\n");
			break;
		case NES_CM_EVENT_RESET:
			nes_debug(NES_DBG_CM, "CM Event: RESET\n");
			cm_event_reset(event);
			break;
		case NES_CM_EVENT_CONNECTED:
			if ((!event->cm_node->cm_id) ||
				(event->cm_node->state != NES_CM_STATE_TSA)) {
				break;
			}
			cm_event_connected(event);
			nes_debug(NES_DBG_CM, "CM Event: CONNECTED\n");
			break;
		case NES_CM_EVENT_ABORTED:
			if ((!event->cm_node->cm_id) || (event->cm_node->state == NES_CM_STATE_TSA)) {
				break;
			}
			cm_event_connect_error(event);
			nes_debug(NES_DBG_CM, "CM Event: ABORTED\n");
			break;
		case NES_CM_EVENT_DROPPED_PKT:
			nes_debug(NES_DBG_CM, "CM Event: DROPPED PKT\n");
			break;
		default:
			nes_debug(NES_DBG_CM, "CM Event: UNKNOWN EVENT TYPE\n");
			break;
	}

	atomic_dec(&cm_core->events_posted);
	event->cm_info.cm_id->rem_ref(event->cm_info.cm_id);
	rem_ref_cm_node(cm_core, event->cm_node);
	kfree(event);

	return;
}