diff options
| author | Máté Eckl <ecklm94@gmail.com> | 2018-09-05 11:16:44 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-09-21 12:06:27 +0200 |
| commit | 57c2b152c5f0866be5bf1acda2f341ba26ba9448 (patch) | |
| tree | 091cabd5ef590d0d0edf0dc972d3cf53ae0008cb /src/scanner.l | |
| parent | 8f55ed41d007061bd8aae94fee2bda172c0e8996 (diff) | |
src: add ipsec (xfrm) expression
This allows matching on ipsec tunnel/beet addresses in xfrm state
associated with a packet, ipsec request id and the SPI.
Examples:
ipsec in ip saddr 192.168.1.0/24
ipsec out ip6 daddr @endpoints
ipsec in spi 1-65536
Joint work with Florian Westphal.
Cc: Máté Eckl <ecklm94@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'src/scanner.l')
| -rw-r--r-- | src/scanner.l | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/scanner.l b/src/scanner.l index 26e63b9b..4a143b1e 100644 --- a/src/scanner.l +++ b/src/scanner.l @@ -555,6 +555,15 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "exthdr" { return EXTHDR; } "ipsec" { return IPSEC; } +"mode" { return MODE; } +"reqid" { return REQID; } +"spnum" { return SPNUM; } +"transport" { return TRANSPORT; } +"tunnel" { return TUNNEL; } + +"in" { return IN; } +"out" { return OUT; } + {addrstring} { yylval->string = xstrdup(yytext); return STRING; |