# hbh nexthdr {esp, ah, comp, udp, udplite, tcp, dccp, sctp, icmpv6}
[
{
"match": {
"left": {
"exthdr": {
"field": "nexthdr",
"name": "hbh"
}
},
"op": "==",
"right": {
"set": [ 6, 17, 33, 50, 51, 58, 108, 132, 136 ]
}
}
}
]
# hbh nexthdr != {esp, ah, comp, udp, udplite, tcp, dccp, sctp, icmpv6}
[
{
"match": {
"left": {
"exthdr": {
"field": "nexthdr",
"name": "hbh"
}
},
"op": "!=",
"right": {
"set": [ 6, 17, 33, 50, 51, 58, 108, 132, 136 ]
}
}
}
]
# hbh nexthdr ip
[
{
"match": {
"left": {
"exthdr": {
"field": "nexthdr",
"name": "hbh"
}
},
"op": "==",
"right": 0
}
}
]
# hbh nexthdr != ip
[
{
"match": {
"left": {
"exthdr": {
"field": "nexthdr",
"name": "hbh"
}
},
"op": "!=",
"right": 0
}
}
]