source-git / nftables

Clone
Source Code
GIT

Blame tests/py/inet/tcp.t.json

c8 c8s master
  1.   1227cde042e6591910a945b5d8b21a1576a371f7
  2.   tests
  3.   py
  4.   inet
  5.   tcp.t.json
Blob History Raw
Packit c5a612 
# tcp dport 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport {telnet, http, https} accept
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    "telnet",
Packit c5a612 
                    "http",
Packit c5a612 
                    "https"
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "accept": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport vmap { 22 : accept, 23 : drop }
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "vmap": {
Packit c5a612 
            "key": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "data": {
Packit c5a612 
                "set": [
Packit c5a612 
                    [
Packit c5a612 
                        22,
Packit c5a612 
                        {
Packit c5a612 
                            "accept": null
Packit c5a612 
                        }
Packit c5a612 
                    ],
Packit c5a612 
                    [
Packit c5a612 
                        23,
Packit c5a612 
                        {
Packit c5a612 
                            "drop": null
Packit c5a612 
                        }
Packit c5a612 
                    ]
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport vmap { 25:accept, 28:drop }
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "vmap": {
Packit c5a612 
            "key": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "data": {
Packit c5a612 
                "set": [
Packit c5a612 
                    [
Packit c5a612 
                        25,
Packit c5a612 
                        {
Packit c5a612 
                            "accept": null
Packit c5a612 
                        }
Packit c5a612 
                    ],
Packit c5a612 
                    [
Packit c5a612 
                        28,
Packit c5a612 
                        {
Packit c5a612 
                            "drop": null
Packit c5a612 
                        }
Packit c5a612 
                    ]
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport { 22, 53, 80, 110 }
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    22,
Packit c5a612 
                    53,
Packit c5a612 
                    80,
Packit c5a612 
                    110
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp dport != { 22, 53, 80, 110 }
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    22,
Packit c5a612 
                    53,
Packit c5a612 
                    80,
Packit c5a612 
                    110
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport vmap { 25:accept, 28:drop }
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "vmap": {
Packit c5a612 
            "key": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "data": {
Packit c5a612 
                "set": [
Packit c5a612 
                    [
Packit c5a612 
                        25,
Packit c5a612 
                        {
Packit c5a612 
                            "accept": null
Packit c5a612 
                        }
Packit c5a612 
                    ],
Packit c5a612 
                    [
Packit c5a612 
                        28,
Packit c5a612 
                        {
Packit c5a612 
                            "drop": null
Packit c5a612 
                        }
Packit c5a612 
                    ]
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport 8080 drop
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 8080
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "drop": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport 1024 tcp dport 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 1024
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sport 1024 tcp dport 22 tcp sequence 0
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 1024
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 0
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence 0 tcp sport 1024 tcp dport 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 0
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 1024
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence 0 tcp sport { 1024, 1022} tcp dport 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 0
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    1024,
Packit c5a612 
                    1022
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "dport",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp sequence != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "sequence",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq 42949672 drop
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 42949672
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "drop": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp ackseq != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "ackseq",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags { fin, syn, rst, psh, ack, urg, ecn, cwr} drop
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "flags",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    "fin",
Packit c5a612 
                    "syn",
Packit c5a612 
                    "rst",
Packit c5a612 
                    "psh",
Packit c5a612 
                    "ack",
Packit c5a612 
                    "urg",
Packit c5a612 
                    "ecn",
Packit c5a612 
                    "cwr"
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "drop": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags != { fin, urg, ecn, cwr} drop
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "flags",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    "fin",
Packit c5a612 
                    "urg",
Packit c5a612 
                    "ecn",
Packit c5a612 
                    "cwr"
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "drop": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags cwr
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "flags",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "in",
Packit c5a612 
            "right": "cwr"
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags != cwr
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "flags",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": "cwr"
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags == syn
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "flags",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "==",
Packit c5a612 
            "right": "syn"
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags & (syn|fin) == (syn|fin)
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "&": [
Packit c5a612 
                    {
Packit c5a612 
                        "payload": {
Packit c5a612 
                            "field": "flags",
Packit c5a612 
                            "protocol": "tcp"
Packit c5a612 
                        }
Packit c5a612 
                    },
Packit c5a612 
                    {
Packit c5a612 
                        "|": [
Packit c5a612 
                            "syn",
Packit c5a612 
                            "fin"
Packit c5a612 
                        ]
Packit c5a612 
                    }
Packit c5a612 
                ]
Packit c5a612 
            },
Packit c5a612 
            "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "|": [
Packit c5a612 
                    "syn",
Packit c5a612 
                    "fin"
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp flags & (fin | syn | rst | psh | ack | urg | ecn | cwr) == fin | syn | rst | psh | ack | urg | ecn | cwr
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "&": [
Packit c5a612 
                    {
Packit c5a612 
                        "payload": {
Packit c5a612 
                            "field": "flags",
Packit c5a612 
                            "protocol": "tcp"
Packit c5a612 
                        }
Packit c5a612 
                    },
Packit c5a612 
                    {
Packit c5a612 
                        "|": [ "fin", { "|": [ "syn", { "|": [ "rst", { "|": [ "psh", { "|": [ "ack", { "|": [ "urg", { "|": [ "ecn", "cwr" ] } ] } ] } ] } ] } ] } ]
Packit c5a612 
                    }
Packit c5a612 
                ]
Packit c5a612 
            },
Packit c5a612 
            "op": "==",
Packit c5a612 
            "right": { "|": [ "fin", { "|": [ "syn", { "|": [ "rst", { "|": [ "psh", { "|": [ "ack", { "|": [ "urg", { "|": [ "ecn", "cwr" ] } ] } ] } ] } ] } ] } ] }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window 22222
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22222
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp window != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "window",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp checksum != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "checksum",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr 1234 accept
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 1234
Packit c5a612 
        }
Packit c5a612 
    },
Packit c5a612 
    {
Packit c5a612 
        "accept": null
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr 22
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 22
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr != 233
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": 233
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr != 33-45
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "range": [ 33, 45 ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr != { 33, 55, 67, 88}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    33,
Packit c5a612 
                    55,
Packit c5a612 
                    67,
Packit c5a612 
                    88
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp urgptr != { 33-55}
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "urgptr",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
            "op": "!=",
Packit c5a612 
            "right": {
Packit c5a612 
                "set": [
Packit c5a612 
                    { "range": [ 33, 55 ] }
Packit c5a612 
                ]
Packit c5a612 
            }
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612
Packit c5a612 
# tcp doff 8
Packit c5a612 
[
Packit c5a612 
    {
Packit c5a612 
        "match": {
Packit c5a612 
            "left": {
Packit c5a612 
                "payload": {
Packit c5a612 
                    "field": "doff",
Packit c5a612 
                    "protocol": "tcp"
Packit c5a612 
                }
Packit c5a612 
            },
Packit c5a612 
	    "op": "==",
Packit c5a612 
            "right": 8
Packit c5a612 
        }
Packit c5a612 
    }
Packit c5a612 
]
Packit c5a612

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation