# udp sport 80 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp eq reg 1 0x00005000 ]
[ immediate reg 0 accept ]
# udp sport != 60 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp neq reg 1 0x00003c00 ]
[ immediate reg 0 accept ]
# udp sport 50-70 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp gte reg 1 0x00003200 ]
[ cmp lte reg 1 0x00004600 ]
[ immediate reg 0 accept ]
# udp sport != 50-60 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ range neq reg 1 0x00003200 0x00003c00 ]
[ immediate reg 0 accept ]
# udp sport { 49, 50} drop
__set%d test-inet 3
__set%d test-inet 0
element 00003100 : 0 [end] element 00003200 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d ]
[ immediate reg 0 drop ]
# udp sport != { 50, 60} accept
__set%d test-inet 3
__set%d test-inet 0
element 00003200 : 0 [end] element 00003c00 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
[ immediate reg 0 accept ]
# udp sport { 12-40}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00000c00 : 0 [end] element 00002900 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d ]
# udp sport != { 13-24}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00000d00 : 0 [end] element 00001900 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# udp dport 80 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ cmp eq reg 1 0x00005000 ]
[ immediate reg 0 accept ]
# udp dport != 60 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ cmp neq reg 1 0x00003c00 ]
[ immediate reg 0 accept ]
# udp dport 70-75 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ cmp gte reg 1 0x00004600 ]
[ cmp lte reg 1 0x00004b00 ]
[ immediate reg 0 accept ]
# udp dport != 50-60 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ range neq reg 1 0x00003200 0x00003c00 ]
[ immediate reg 0 accept ]
# udp dport { 49, 50} drop
__set%d test-inet 3
__set%d test-inet 0
element 00003100 : 0 [end] element 00003200 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d ]
[ immediate reg 0 drop ]
# udp dport != { 50, 60} accept
__set%d test-inet 3
__set%d test-inet 0
element 00003200 : 0 [end] element 00003c00 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
[ immediate reg 0 accept ]
# udp dport { 70-75} accept
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00004600 : 0 [end] element 00004c00 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d ]
[ immediate reg 0 accept ]
# udp dport != { 50-60} accept
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00003200 : 0 [end] element 00003d00 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
[ immediate reg 0 accept ]
# udp length 6666
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ cmp eq reg 1 0x00000a1a ]
# udp length != 6666
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ cmp neq reg 1 0x00000a1a ]
# udp length 50-65 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ cmp gte reg 1 0x00003200 ]
[ cmp lte reg 1 0x00004100 ]
[ immediate reg 0 accept ]
# udp length != 50-65 accept
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ range neq reg 1 0x00003200 0x00004100 ]
[ immediate reg 0 accept ]
# udp length { 50, 65} accept
__set%d test-inet 3
__set%d test-inet 0
element 00003200 : 0 [end] element 00004100 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ lookup reg 1 set __set%d ]
[ immediate reg 0 accept ]
# udp length != { 50, 65} accept
__set%d test-inet 3
__set%d test-inet 0
element 00003200 : 0 [end] element 00004100 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
[ immediate reg 0 accept ]
# udp length { 35-50}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00002300 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ lookup reg 1 set __set%d ]
# udp length != { 35-50}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00002300 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 4 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# udp checksum 6666 drop
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ cmp eq reg 1 0x00000a1a ]
[ immediate reg 0 drop ]
# udp checksum != { 444, 555} accept
__set%d test-inet 3
__set%d test-inet 0
element 0000bc01 : 0 [end] element 00002b02 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
[ immediate reg 0 accept ]
# udp checksum 22
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ cmp eq reg 1 0x00001600 ]
# udp checksum != 233
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ cmp neq reg 1 0x0000e900 ]
# udp checksum 33-45
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ cmp gte reg 1 0x00002100 ]
[ cmp lte reg 1 0x00002d00 ]
# udp checksum != 33-45
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ range neq reg 1 0x00002100 0x00002d00 ]
# udp checksum { 33, 55, 67, 88}
__set%d test-inet 3
__set%d test-inet 0
element 00002100 : 0 [end] element 00003700 : 0 [end] element 00004300 : 0 [end] element 00005800 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ lookup reg 1 set __set%d ]
# udp checksum != { 33, 55, 67, 88}
__set%d test-inet 3
__set%d test-inet 0
element 00002100 : 0 [end] element 00003700 : 0 [end] element 00004300 : 0 [end] element 00005800 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# udp checksum { 33-55}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00002100 : 0 [end] element 00003800 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ lookup reg 1 set __set%d ]
# udp checksum != { 33-55}
__set%d test-inet 7
__set%d test-inet 0
element 00000000 : 1 [end] element 00002100 : 0 [end] element 00003800 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ payload load 2b @ transport header + 6 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# iif "lo" udp checksum set 0
inet test-inet input
[ meta load iif => reg 1 ]
[ cmp eq reg 1 0x00000001 ]
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ immediate reg 1 0x00000000 ]
[ payload write reg 1 => 2b @ transport header + 6 csum_type 1 csum_off 6 csum_flags 0x0 ]
# iif "lo" udp dport set 65535
inet test-inet input
[ meta load iif => reg 1 ]
[ cmp eq reg 1 0x00000001 ]
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000011 ]
[ immediate reg 1 0x0000ffff ]
[ payload write reg 1 => 2b @ transport header + 2 csum_type 1 csum_off 6 csum_flags 0x0 ]