|
Packit |
c5a612 |
# udplite sport 80 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00005000 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport != 60 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp neq reg 1 0x00003c00 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport 50-70 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp gte reg 1 0x00003200 ]
|
|
Packit |
c5a612 |
[ cmp lte reg 1 0x00004600 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport != 50-60 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ range neq reg 1 0x00003200 0x00003c00 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport { 49, 50} drop
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00003100 : 0 [end] element 00003200 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
[ immediate reg 0 drop ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport != { 49, 50} accept
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00003100 : 0 [end] element 00003200 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport { 12-40}
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00000c00 : 0 [end] element 00002900 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite sport != { 12-40}
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00000c00 : 0 [end] element 00002900 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 0 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport 80 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00005000 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport != 60 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp neq reg 1 0x00003c00 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport 70-75 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp gte reg 1 0x00004600 ]
|
|
Packit |
c5a612 |
[ cmp lte reg 1 0x00004b00 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport != 50-60 accept
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ range neq reg 1 0x00003200 0x00003c00 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport { 49, 50} drop
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00003100 : 0 [end] element 00003200 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
[ immediate reg 0 drop ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport != { 49, 50} accept
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00003100 : 0 [end] element 00003200 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport { 70-75} accept
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00004600 : 0 [end] element 00004c00 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite dport != { 70-75} accept
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00004600 : 0 [end] element 00004c00 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 2 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum 6666 drop
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000a1a ]
|
|
Packit |
c5a612 |
[ immediate reg 0 drop ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum != { 444, 555} accept
|
|
Packit |
c5a612 |
__set%d test-inet 3
|
|
Packit |
c5a612 |
__set%d test-inet 0
|
|
Packit |
c5a612 |
element 0000bc01 : 0 [end] element 00002b02 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
[ immediate reg 0 accept ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum 22
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00001600 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum != 233
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp neq reg 1 0x0000e900 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum 33-45
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp gte reg 1 0x00002100 ]
|
|
Packit |
c5a612 |
[ cmp lte reg 1 0x00002d00 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum != 33-45
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ range neq reg 1 0x00002100 0x00002d00 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum { 33, 55, 67, 88}
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00002100 : 0 [end] element 00003700 : 0 [end] element 00004300 : 0 [end] element 00005800 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum != { 33, 55, 67, 88}
|
|
Packit |
c5a612 |
__set%d test-ip4 3
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00002100 : 0 [end] element 00003700 : 0 [end] element 00004300 : 0 [end] element 00005800 : 0 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum { 33-55}
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00002100 : 0 [end] element 00003800 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d ]
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# udplite checksum != { 33-55}
|
|
Packit |
c5a612 |
__set%d test-ip4 7
|
|
Packit |
c5a612 |
__set%d test-ip4 0
|
|
Packit |
c5a612 |
element 00000000 : 1 [end] element 00002100 : 0 [end] element 00003800 : 1 [end]
|
|
Packit |
c5a612 |
inet test-inet input
|
|
Packit |
c5a612 |
[ meta load l4proto => reg 1 ]
|
|
Packit |
c5a612 |
[ cmp eq reg 1 0x00000088 ]
|
|
Packit |
c5a612 |
[ payload load 2b @ transport header + 6 => reg 1 ]
|
|
Packit |
c5a612 |
[ lookup reg 1 set __set%d 0x1 ]
|
|
Packit |
c5a612 |
|