# udp sport 80 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ cmp eq reg 1 0x00005000 ]

  [ immediate reg 0 accept ]

# udp sport != 60 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ cmp neq reg 1 0x00003c00 ]

  [ immediate reg 0 accept ]

# udp sport 50-70 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ cmp gte reg 1 0x00003200 ]

  [ cmp lte reg 1 0x00004600 ]

  [ immediate reg 0 accept ]

# udp sport != 50-60 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ range neq reg 1 0x00003200 0x00003c00 ]

  [ immediate reg 0 accept ]

# udp sport { 49, 50} drop

__set%d test-inet 3

__set%d test-inet 0

	element 00003100  : 0 [end]	element 00003200  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ lookup reg 1 set __set%d ]

  [ immediate reg 0 drop ]

# udp sport != { 50, 60} accept

__set%d test-inet 3

__set%d test-inet 0

	element 00003200  : 0 [end]	element 00003c00  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

  [ immediate reg 0 accept ]

# udp sport { 12-40}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00000c00  : 0 [end]	element 00002900  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ lookup reg 1 set __set%d ]

# udp sport != { 13-24}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00000d00  : 0 [end]	element 00001900  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 0 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

# udp dport 80 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ cmp eq reg 1 0x00005000 ]

  [ immediate reg 0 accept ]

# udp dport != 60 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ cmp neq reg 1 0x00003c00 ]

  [ immediate reg 0 accept ]

# udp dport 70-75 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ cmp gte reg 1 0x00004600 ]

  [ cmp lte reg 1 0x00004b00 ]

  [ immediate reg 0 accept ]

# udp dport != 50-60 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ range neq reg 1 0x00003200 0x00003c00 ]

  [ immediate reg 0 accept ]

# udp dport { 49, 50} drop

__set%d test-inet 3

__set%d test-inet 0

	element 00003100  : 0 [end]	element 00003200  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ lookup reg 1 set __set%d ]

  [ immediate reg 0 drop ]

# udp dport != { 50, 60} accept

__set%d test-inet 3

__set%d test-inet 0

	element 00003200  : 0 [end]	element 00003c00  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

  [ immediate reg 0 accept ]

# udp dport { 70-75} accept

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00004600  : 0 [end]	element 00004c00  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ lookup reg 1 set __set%d ]

  [ immediate reg 0 accept ]

# udp dport != { 50-60} accept

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00003200  : 0 [end]	element 00003d00  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 2 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

  [ immediate reg 0 accept ]

# udp length 6666

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ cmp eq reg 1 0x00000a1a ]

# udp length != 6666

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ cmp neq reg 1 0x00000a1a ]

# udp length 50-65 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ cmp gte reg 1 0x00003200 ]

  [ cmp lte reg 1 0x00004100 ]

  [ immediate reg 0 accept ]

# udp length != 50-65 accept

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ range neq reg 1 0x00003200 0x00004100 ]

  [ immediate reg 0 accept ]

# udp length { 50, 65} accept

__set%d test-inet 3

__set%d test-inet 0

	element 00003200  : 0 [end]	element 00004100  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ lookup reg 1 set __set%d ]

  [ immediate reg 0 accept ]

# udp length != { 50, 65} accept

__set%d test-inet 3

__set%d test-inet 0

	element 00003200  : 0 [end]	element 00004100  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

  [ immediate reg 0 accept ]

# udp length { 35-50}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00002300  : 0 [end]	element 00003300  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ lookup reg 1 set __set%d ]

# udp length != { 35-50}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00002300  : 0 [end]	element 00003300  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 4 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

# udp checksum 6666 drop

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ cmp eq reg 1 0x00000a1a ]

  [ immediate reg 0 drop ]

# udp checksum != { 444, 555} accept

__set%d test-inet 3

__set%d test-inet 0

	element 0000bc01  : 0 [end]	element 00002b02  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

  [ immediate reg 0 accept ]

# udp checksum 22

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ cmp eq reg 1 0x00001600 ]

# udp checksum != 233

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ cmp neq reg 1 0x0000e900 ]

# udp checksum 33-45

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ cmp gte reg 1 0x00002100 ]

  [ cmp lte reg 1 0x00002d00 ]

# udp checksum != 33-45

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ range neq reg 1 0x00002100 0x00002d00 ]

# udp checksum { 33, 55, 67, 88}

__set%d test-inet 3

__set%d test-inet 0

	element 00002100  : 0 [end]	element 00003700  : 0 [end]	element 00004300  : 0 [end]	element 00005800  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ lookup reg 1 set __set%d ]

# udp checksum != { 33, 55, 67, 88}

__set%d test-inet 3

__set%d test-inet 0

	element 00002100  : 0 [end]	element 00003700  : 0 [end]	element 00004300  : 0 [end]	element 00005800  : 0 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

# udp checksum { 33-55}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00002100  : 0 [end]	element 00003800  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ lookup reg 1 set __set%d ]

# udp checksum != { 33-55}

__set%d test-inet 7

__set%d test-inet 0

	element 00000000  : 1 [end]	element 00002100  : 0 [end]	element 00003800  : 1 [end]

inet test-inet input 

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ payload load 2b @ transport header + 6 => reg 1 ]

  [ lookup reg 1 set __set%d 0x1 ]

# iif "lo" udp checksum set 0

inet test-inet input

  [ meta load iif => reg 1 ]

  [ cmp eq reg 1 0x00000001 ]

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ immediate reg 1 0x00000000 ]

  [ payload write reg 1 => 2b @ transport header + 6 csum_type 1 csum_off 6 csum_flags 0x0 ]

# iif "lo" udp dport set 65535

inet test-inet input

  [ meta load iif => reg 1 ]

  [ cmp eq reg 1 0x00000001 ]

  [ meta load l4proto => reg 1 ]

  [ cmp eq reg 1 0x00000011 ]

  [ immediate reg 1 0x0000ffff ]

  [ payload write reg 1 => 2b @ transport header + 2 csum_type 1 csum_off 6 csum_flags 0x0 ]