/*

 * q_u32.c		U32 filter.

 *

 *		This program is free software; you can u32istribute it and/or

 *		modify it under the terms of the GNU General Public License

 *		as published by the Free Software Foundation; either version

 *		2 of the License, or (at your option) any later version.

 *

 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>

 *		Match mark added by Catalin(ux aka Dino) BOIE <catab at umbrella.ro> [5 nov 2004]

 *

 */

#include <stdio.h>

#include <stdlib.h>

#include <unistd.h>

#include <fcntl.h>

#include <sys/socket.h>

#include <netinet/in.h>

#include <arpa/inet.h>

#include <string.h>

#include <linux/if.h>

#include <linux/if_ether.h>

#include "utils.h"

#include "tc_util.h"

static void explain(void)

{

	fprintf(stderr,

		"Usage: ... u32 [ match SELECTOR ... ] [ link HTID ] [ classid CLASSID ]\n"

		"               [ action ACTION_SPEC ] [ offset OFFSET_SPEC ]\n"

		"               [ ht HTID ] [ hashkey HASHKEY_SPEC ]\n"

		"               [ sample SAMPLE ] [skip_hw | skip_sw]\n"

		"or         u32 divisor DIVISOR\n"

		"\n"

		"Where: SELECTOR := SAMPLE SAMPLE ...\n"

		"       SAMPLE := { ip | ip6 | udp | tcp | icmp | u{32|16|8} | mark }\n"

		"                 SAMPLE_ARGS [ divisor DIVISOR ]\n"

		"       FILTERID := X:Y:Z\n"

		"\nNOTE: CLASSID is parsed at hexadecimal input.\n");

}

static int get_u32_handle(__u32 *handle, const char *str)

{

	__u32 htid = 0, hash = 0, nodeid = 0;

	char *tmp = strchr(str, ':');

	if (tmp == NULL) {

		if (memcmp("0x", str, 2) == 0)

			return get_u32(handle, str, 16);

		return -1;

	}

	htid = strtoul(str, &tmp, 16);

	if (tmp == str && *str != ':' && *str != 0)

		return -1;

	if (htid >= 0x1000)

		return -1;

	if (*tmp) {

		str = tmp + 1;

		hash = strtoul(str, &tmp, 16);

		if (tmp == str && *str != ':' && *str != 0)

			return -1;

		if (hash >= 0x100)

			return -1;

		if (*tmp) {

			str = tmp + 1;

			nodeid = strtoul(str, &tmp, 16);

			if (tmp == str && *str != 0)

				return -1;

			if (nodeid >= 0x1000)

				return -1;

		}

	}

	*handle = (htid<<20)|(hash<<12)|nodeid;

	return 0;

}

static char *sprint_u32_handle(__u32 handle, char *buf)

{

	int bsize = SPRINT_BSIZE-1;

	__u32 htid = TC_U32_HTID(handle);

	__u32 hash = TC_U32_HASH(handle);

	__u32 nodeid = TC_U32_NODE(handle);

	char *b = buf;

	if (handle == 0) {

		snprintf(b, bsize, "none");

		return b;

	}

	if (htid) {

		int l = snprintf(b, bsize, "%x:", htid>>20);

		bsize -= l;

		b += l;

	}

	if (nodeid|hash) {

		if (hash) {

			int l = snprintf(b, bsize, "%x", hash);

			bsize -= l;

			b += l;

		}

		if (nodeid) {

			int l = snprintf(b, bsize, ":%x", nodeid);

			bsize -= l;

			b += l;

		}

	}

	if (show_raw)

		snprintf(b, bsize, "[%08x] ", handle);

	return buf;

}

static int pack_key(struct tc_u32_sel *sel, __u32 key, __u32 mask,

		    int off, int offmask)

{

	int i;

	int hwm = sel->nkeys;

	key &= mask;

	for (i = 0; i < hwm; i++) {

		if (sel->keys[i].off == off && sel->keys[i].offmask == offmask) {

			__u32 intersect = mask & sel->keys[i].mask;

			if ((key ^ sel->keys[i].val) & intersect)

				return -1;

			sel->keys[i].val |= key;

			sel->keys[i].mask |= mask;

			return 0;

		}

	}

	if (hwm >= 128)

		return -1;

	if (off % 4)

		return -1;

	sel->keys[hwm].val = key;

	sel->keys[hwm].mask = mask;

	sel->keys[hwm].off = off;

	sel->keys[hwm].offmask = offmask;

	sel->nkeys++;

	return 0;

}

static int pack_key32(struct tc_u32_sel *sel, __u32 key, __u32 mask,

		      int off, int offmask)

{

	key = htonl(key);

	mask = htonl(mask);

	return pack_key(sel, key, mask, off, offmask);

}

static int pack_key16(struct tc_u32_sel *sel, __u32 key, __u32 mask,

		      int off, int offmask)

{

	if (key > 0xFFFF || mask > 0xFFFF)

		return -1;

	if ((off & 3) == 0) {

		key <<= 16;

		mask <<= 16;

	}

	off &= ~3;

	key = htonl(key);

	mask = htonl(mask);

	return pack_key(sel, key, mask, off, offmask);

}

static int pack_key8(struct tc_u32_sel *sel, __u32 key, __u32 mask, int off,

		     int offmask)

{

	if (key > 0xFF || mask > 0xFF)

		return -1;

	if ((off & 3) == 0) {

		key <<= 24;

		mask <<= 24;

	} else if ((off & 3) == 1) {

		key <<= 16;

		mask <<= 16;

	} else if ((off & 3) == 2) {

		key <<= 8;

		mask <<= 8;

	}

	off &= ~3;

	key = htonl(key);

	mask = htonl(mask);

	return pack_key(sel, key, mask, off, offmask);

}

static int parse_at(int *argc_p, char ***argv_p, int *off, int *offmask)

{

	int argc = *argc_p;

	char **argv = *argv_p;

	char *p = *argv;

	if (argc <= 0)

		return -1;

	if (strlen(p) > strlen("nexthdr+") &&

	    memcmp(p, "nexthdr+", strlen("nexthdr+")) == 0) {

		*offmask = -1;

		p += strlen("nexthdr+");

	} else if (matches(*argv, "nexthdr+") == 0) {

		NEXT_ARG();

		*offmask = -1;

		p = *argv;

	}

	if (get_integer(off, p, 0))

		return -1;

	argc--; argv++;

	*argc_p = argc;

	*argv_p = argv;

	return 0;

}

static int parse_u32(int *argc_p, char ***argv_p, struct tc_u32_sel *sel,

		     int off, int offmask)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	__u32 key;

	__u32 mask;

	if (argc < 2)

		return -1;

	if (get_u32(&key, *argv, 0))

		return -1;

	argc--; argv++;

	if (get_u32(&mask, *argv, 16))

		return -1;

	argc--; argv++;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	res = pack_key32(sel, key, mask, off, offmask);

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_u16(int *argc_p, char ***argv_p, struct tc_u32_sel *sel,

		     int off, int offmask)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	__u32 key;

	__u32 mask;

	if (argc < 2)

		return -1;

	if (get_u32(&key, *argv, 0))

		return -1;

	argc--; argv++;

	if (get_u32(&mask, *argv, 16))

		return -1;

	argc--; argv++;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	res = pack_key16(sel, key, mask, off, offmask);

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_u8(int *argc_p, char ***argv_p, struct tc_u32_sel *sel,

		    int off, int offmask)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	__u32 key;

	__u32 mask;

	if (argc < 2)

		return -1;

	if (get_u32(&key, *argv, 0))

		return -1;

	argc--; argv++;

	if (get_u32(&mask, *argv, 16))

		return -1;

	argc--; argv++;

	if (key > 0xFF || mask > 0xFF)

		return -1;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	res = pack_key8(sel, key, mask, off, offmask);

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ip_addr(int *argc_p, char ***argv_p, struct tc_u32_sel *sel,

			 int off)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	inet_prefix addr;

	__u32 mask;

	int offmask = 0;

	if (argc < 1)

		return -1;

	if (get_prefix_1(&addr, *argv, AF_INET))

		return -1;

	argc--; argv++;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	mask = 0;

	if (addr.bitlen)

		mask = htonl(0xFFFFFFFF << (32 - addr.bitlen));

	if (pack_key(sel, addr.data[0], mask, off, offmask) < 0)

		return -1;

	res = 0;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ip6_addr(int *argc_p, char ***argv_p,

			  struct tc_u32_sel *sel, int off)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	int plen = 128;

	int i;

	inet_prefix addr;

	int offmask = 0;

	if (argc < 1)

		return -1;

	if (get_prefix_1(&addr, *argv, AF_INET6))

		return -1;

	argc--; argv++;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	plen = addr.bitlen;

	for (i = 0; i < plen; i += 32) {

		if (i + 31 < plen) {

			res = pack_key(sel, addr.data[i / 32],

				       0xFFFFFFFF, off + 4 * (i / 32), offmask);

			if (res < 0)

				return -1;

		} else if (i < plen) {

			__u32 mask = htonl(0xFFFFFFFF << (32 - (plen - i)));

			res = pack_key(sel, addr.data[i / 32],

				       mask, off + 4 * (i / 32), offmask);

			if (res < 0)

				return -1;

		}

	}

	res = 0;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ip6_class(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	__u32 key;

	__u32 mask;

	int off = 0;

	int offmask = 0;

	if (argc < 2)

		return -1;

	if (get_u32(&key, *argv, 0))

		return -1;

	argc--; argv++;

	if (get_u32(&mask, *argv, 16))

		return -1;

	argc--; argv++;

	if (key > 0xFF || mask > 0xFF)

		return -1;

	key <<= 20;

	mask <<= 20;

	key = htonl(key);

	mask = htonl(mask);

	res = pack_key(sel, key, mask, off, offmask);

	if (res < 0)

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return 0;

}

static int parse_ether_addr(int *argc_p, char ***argv_p,

			    struct tc_u32_sel *sel, int off)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	__u8 addr[6];

	int offmask = 0;

	int i;

	if (argc < 1)

		return -1;

	if (sscanf(*argv, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx",

		   addr + 0, addr + 1, addr + 2,

		   addr + 3, addr + 4, addr + 5) != 6) {

		fprintf(stderr, "parse_ether_addr: improperly formed address '%s'\n",

			*argv);

		return -1;

	}

	argc--; argv++;

	if (argc > 0 && strcmp(argv[0], "at") == 0) {

		NEXT_ARG();

		if (parse_at(&argc, &argv, &off, &offmask))

			return -1;

	}

	for (i = 0; i < 6; i++) {

		res = pack_key8(sel, addr[i], 0xFF, off + i, offmask);

		if (res < 0)

			return -1;

	}

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ip(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	if (argc < 2)

		return -1;

	if (strcmp(*argv, "src") == 0) {

		NEXT_ARG();

		res = parse_ip_addr(&argc, &argv, sel, 12);

	} else if (strcmp(*argv, "dst") == 0) {

		NEXT_ARG();

		res = parse_ip_addr(&argc, &argv, sel, 16);

	} else if (strcmp(*argv, "tos") == 0 ||

	    matches(*argv, "dsfield") == 0 ||

	    matches(*argv, "precedence") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 1, 0);

	} else if (strcmp(*argv, "ihl") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 0, 0);

	} else if (strcmp(*argv, "protocol") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 9, 0);

	} else if (strcmp(*argv, "nofrag") == 0) {

		argc--; argv++;

		res = pack_key16(sel, 0, 0x3FFF, 6, 0);

	} else if (strcmp(*argv, "firstfrag") == 0) {

		argc--; argv++;

		res = pack_key16(sel, 0x2000, 0x3FFF, 6, 0);

	} else if (strcmp(*argv, "df") == 0) {

		argc--; argv++;

		res = pack_key16(sel, 0x4000, 0x4000, 6, 0);

	} else if (strcmp(*argv, "mf") == 0) {

		argc--; argv++;

		res = pack_key16(sel, 0x2000, 0x2000, 6, 0);

	} else if (strcmp(*argv, "dport") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 22, 0);

	} else if (strcmp(*argv, "sport") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 20, 0);

	} else if (strcmp(*argv, "icmp_type") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 20, 0);

	} else if (strcmp(*argv, "icmp_code") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 21, 0);

	} else

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ip6(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	if (argc < 2)

		return -1;

	if (strcmp(*argv, "src") == 0) {

		NEXT_ARG();

		res = parse_ip6_addr(&argc, &argv, sel, 8);

	} else if (strcmp(*argv, "dst") == 0) {

		NEXT_ARG();

		res = parse_ip6_addr(&argc, &argv, sel, 24);

	} else if (strcmp(*argv, "priority") == 0) {

		NEXT_ARG();

		res = parse_ip6_class(&argc, &argv, sel);

	} else if (strcmp(*argv, "protocol") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 6, 0);

	} else if (strcmp(*argv, "flowlabel") == 0) {

		NEXT_ARG();

		res = parse_u32(&argc, &argv, sel, 0, 0);

	} else if (strcmp(*argv, "dport") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 42, 0);

	} else if (strcmp(*argv, "sport") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 40, 0);

	} else if (strcmp(*argv, "icmp_type") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 40, 0);

	} else if (strcmp(*argv, "icmp_code") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 41, 1);

	} else

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_ether(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	if (argc < 2)

		return -1;

	if (strcmp(*argv, "src") == 0) {

		NEXT_ARG();

		res = parse_ether_addr(&argc, &argv, sel, -8);

	} else if (strcmp(*argv, "dst") == 0) {

		NEXT_ARG();

		res = parse_ether_addr(&argc, &argv, sel, -14);

	} else {

		fprintf(stderr, "Unknown match: ether %s\n", *argv);

		return -1;

	}

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

#define parse_tcp parse_udp

static int parse_udp(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	if (argc < 2)

		return -1;

	if (strcmp(*argv, "src") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 0, -1);

	} else if (strcmp(*argv, "dst") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 2, -1);

	} else

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_icmp(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	if (argc < 2)

		return -1;

	if (strcmp(*argv, "type") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 0, -1);

	} else if (strcmp(*argv, "code") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 1, -1);

	} else

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_mark(int *argc_p, char ***argv_p, struct nlmsghdr *n)

{

	int res = -1;

	int argc = *argc_p;

	char **argv = *argv_p;

	struct tc_u32_mark mark;

	if (argc <= 1)

		return -1;

	if (get_u32(&mark.val, *argv, 0)) {

		fprintf(stderr, "Illegal \"mark\" value\n");

		return -1;

	}

	NEXT_ARG();

	if (get_u32(&mark.mask, *argv, 0)) {

		fprintf(stderr, "Illegal \"mark\" mask\n");

		return -1;

	}

	NEXT_ARG();

	if ((mark.val & mark.mask) != mark.val) {

		fprintf(stderr, "Illegal \"mark\" (impossible combination)\n");

		return -1;

	}

	addattr_l(n, MAX_MSG, TCA_U32_MARK, &mark, sizeof(mark));

	res = 0;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_selector(int *argc_p, char ***argv_p,

			  struct tc_u32_sel *sel, struct nlmsghdr *n)

{

	int argc = *argc_p;

	char **argv = *argv_p;

	int res = -1;

	if (argc <= 0)

		return -1;

	if (matches(*argv, "u32") == 0) {

		NEXT_ARG();

		res = parse_u32(&argc, &argv, sel, 0, 0);

	} else if (matches(*argv, "u16") == 0) {

		NEXT_ARG();

		res = parse_u16(&argc, &argv, sel, 0, 0);

	} else if (matches(*argv, "u8") == 0) {

		NEXT_ARG();

		res = parse_u8(&argc, &argv, sel, 0, 0);

	} else if (matches(*argv, "ip") == 0) {

		NEXT_ARG();

		res = parse_ip(&argc, &argv, sel);

	} else	if (matches(*argv, "ip6") == 0) {

		NEXT_ARG();

		res = parse_ip6(&argc, &argv, sel);

	} else if (matches(*argv, "udp") == 0) {

		NEXT_ARG();

		res = parse_udp(&argc, &argv, sel);

	} else if (matches(*argv, "tcp") == 0) {

		NEXT_ARG();

		res = parse_tcp(&argc, &argv, sel);

	} else if (matches(*argv, "icmp") == 0) {

		NEXT_ARG();

		res = parse_icmp(&argc, &argv, sel);

	} else if (matches(*argv, "mark") == 0) {

		NEXT_ARG();

		res = parse_mark(&argc, &argv, n);

	} else if (matches(*argv, "ether") == 0) {

		NEXT_ARG();

		res = parse_ether(&argc, &argv, sel);

	} else

		return -1;

	*argc_p = argc;

	*argv_p = argv;

	return res;

}

static int parse_offset(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int argc = *argc_p;

	char **argv = *argv_p;

	while (argc > 0) {

		if (matches(*argv, "plus") == 0) {

			int off;

			NEXT_ARG();

			if (get_integer(&off, *argv, 0))

				return -1;

			sel->off = off;

			sel->flags |= TC_U32_OFFSET;

		} else if (matches(*argv, "at") == 0) {

			int off;

			NEXT_ARG();

			if (get_integer(&off, *argv, 0))

				return -1;

			sel->offoff = off;

			if (off%2) {

				fprintf(stderr, "offset \"at\" must be even\n");

				return -1;

			}

			sel->flags |= TC_U32_VAROFFSET;

		} else if (matches(*argv, "mask") == 0) {

			NEXT_ARG();

			if (get_be16(&sel->offmask, *argv, 16))

				return -1;

			sel->flags |= TC_U32_VAROFFSET;

		} else if (matches(*argv, "shift") == 0) {

			int shift;

			NEXT_ARG();

			if (get_integer(&shift, *argv, 0))

				return -1;

			sel->offshift = shift;

			sel->flags |= TC_U32_VAROFFSET;

		} else if (matches(*argv, "eat") == 0) {

			sel->flags |= TC_U32_EAT;

		} else {

			break;

		}

		argc--; argv++;

	}

	*argc_p = argc;

	*argv_p = argv;

	return 0;

}

static int parse_hashkey(int *argc_p, char ***argv_p, struct tc_u32_sel *sel)

{

	int argc = *argc_p;

	char **argv = *argv_p;

	while (argc > 0) {

		if (matches(*argv, "mask") == 0) {

			NEXT_ARG();

			if (get_be32(&sel->hmask, *argv, 16))

				return -1;

		} else if (matches(*argv, "at") == 0) {

			int num;

			NEXT_ARG();

			if (get_integer(&num, *argv, 0))

				return -1;

			if (num%4)

				return -1;

			sel->hoff = num;

		} else {

			break;

		}

		argc--; argv++;

	}

	*argc_p = argc;

	*argv_p = argv;

	return 0;

}

static void print_ipv4(FILE *f, const struct tc_u32_key *key)

{

	char abuf[256];

	switch (key->off) {

	case 0:

		switch (ntohl(key->mask)) {

		case 0x0f000000:

			fprintf(f, "\n  match IP ihl %u",

				ntohl(key->val) >> 24);

			return;

		case 0x00ff0000:

			fprintf(f, "\n  match IP dsfield %#x",

				ntohl(key->val) >> 16);

			return;

		}

		break;

	case 8:

		if (ntohl(key->mask) == 0x00ff0000) {

			fprintf(f, "\n  match IP protocol %d",

				ntohl(key->val) >> 16);

			return;

		}

		break;

	case 12:

	case 16: {

			int bits = mask2bits(key->mask);

			if (bits >= 0) {

				fprintf(f, "\n  %s %s/%d",

					key->off == 12 ? "match IP src" : "match IP dst",

					inet_ntop(AF_INET, &key->val,

						  abuf, sizeof(abuf)),

					bits);

				return;

			}

		}

		break;

	case 20:

		switch (ntohl(key->mask)) {

		case 0x0000ffff:

			fprintf(f, "\n  match dport %u",

				ntohl(key->val) & 0xffff);

			return;

		case 0xffff0000:

			fprintf(f, "\n  match sport %u",

				ntohl(key->val) >> 16);

			return;

		case 0xffffffff:

			fprintf(f, "\n  match dport %u, match sport %u",

				ntohl(key->val) & 0xffff,

				ntohl(key->val) >> 16);

			return;

		}

		/* XXX: Default print_raw */

	}