path: root/tests/py/inet/icmp.t.json
Commit message (Collapse)AuthorAgeFilesLines
* JSON: Make match op mandatory, introduce 'in' operatorPhil Sutter2018-08-301-0/+10
| | | | | | | | This special operator is required for cases where missing operator does not lead to same results as equal operator, i.e. with bitmasks on RHS. Signed-off-by: Phil Sutter <> Signed-off-by: Pablo Neira Ayuso <>
* JSON: Review payload expressionPhil Sutter2018-08-301-6/+6
| | | | | | | | | | | For raw payloads, property "name" is not needed, it's clearly identified by base/offset/len properties. In non-raw payload expressions, rename property "name" to "protocol" as suggested during NFWS. Signed-off-by: Phil Sutter <> Signed-off-by: Pablo Neira Ayuso <>
* JSON: Make meta statement/expression extensiblePhil Sutter2018-08-301-4/+4
| | | | | | | | | | Lessons learned from fwd statement: We must not assume a given statement/expression may not receive further properties in the future. Therefore make meta value an object with a property "key" instead of just a string containing the key name. Signed-off-by: Phil Sutter <> Signed-off-by: Pablo Neira Ayuso <>
* netlink_delinearize: Refactor meta_may_dependency_kill()Phil Sutter2018-06-261-0/+114
The original intent was to fix a bug: The following rule in inet table: | meta nfproto ipv4 icmpv6 type echo-reply Was added correctly but when printing the meta match was falsely removed. The fix is to deny dependency killing if RHS family of nfproto match doesn't match RHS family of l4proto match. Adding this to the already large conditional led to even more unreadable code, therefore this patch tries to clean that up (and also removes the partial code duplication. Signed-off-by: Phil Sutter <> Signed-off-by: Florian Westphal <>