From d196dccf1853039656f15c8da94ad349a3b7d07c Mon Sep 17 00:00:00 2001
From: Phil Sutter <phil@nwl.cc>
Date: Tue, 8 May 2018 13:08:45 +0200
Subject: tests/py: Support testing JSON input and output as well

This extends nft-test.py by optional JSON testing capabilities,
activated via '-j'/'--enable-json' parameter).

JSON testing happens for all rules which are supposed to work: After a
rule has been added and the existing tests (payload, ruleset listing
output) have been performed, basically the same test is done again using
a recorded JSON equivalent and (if necessary) a recorded listing output.

The code tries to ease new test case creation overhead by
auto-generating JSON equivalent input via listing the (non-JSON) rule in
JSON format. Also, differing netlink debug and listing output are stored
in *.got files to assist in analyzing/fixing failing test cases.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---
 tests/py/any/ct.t.json | 1352 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 1352 insertions(+)
 create mode 100644 tests/py/any/ct.t.json

(limited to 'tests/py/any/ct.t.json')

diff --git a/tests/py/any/ct.t.json b/tests/py/any/ct.t.json
new file mode 100644
index 00000000..83f1bbbd
--- /dev/null
+++ b/tests/py/any/ct.t.json
@@ -0,0 +1,1352 @@
+# ct state new,established, related, untracked
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "right": [
+                "new",
+                "established",
+                "related",
+                "untracked"
+            ]
+        }
+    }
+]
+
+# ct state != related
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "op": "!=",
+            "right": "related"
+        }
+    }
+]
+
+# ct state {new,established, related, untracked}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "right": {
+                "set": [
+                    "new",
+                    "established",
+                    "related",
+                    "untracked"
+                ]
+            }
+        }
+    }
+]
+
+# ct state != {new,established, related, untracked}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "set": [
+                    "new",
+                    "established",
+                    "related",
+                    "untracked"
+                ]
+            }
+        }
+    }
+]
+
+# ct state invalid drop
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "right": "invalid"
+        }
+    },
+    {
+        "drop": null
+    }
+]
+
+# ct state established accept
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "right": "established"
+        }
+    },
+    {
+        "accept": null
+    }
+]
+
+# ct state 8
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "state"
+                }
+            },
+            "right": 8
+        }
+    }
+]
+
+# ct direction original
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "right": "original"
+        }
+    }
+]
+
+# ct direction != original
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "op": "!=",
+            "right": "original"
+        }
+    }
+]
+
+# ct direction reply
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "right": "reply"
+        }
+    }
+]
+
+# ct direction != reply
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "op": "!=",
+            "right": "reply"
+        }
+    }
+]
+
+# ct direction {reply, original}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "right": {
+                "set": [
+                    "reply",
+                    "original"
+                ]
+            }
+        }
+    }
+]
+
+# ct direction != {reply, original}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "direction"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "set": [
+                    "reply",
+                    "original"
+                ]
+            }
+        }
+    }
+]
+
+# ct status expected
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": "expected"
+        }
+    }
+]
+
+# ct status != expected
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "op": "!=",
+            "right": "expected"
+        }
+    }
+]
+
+# ct status seen-reply
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": "seen-reply"
+        }
+    }
+]
+
+# ct status != seen-reply
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "op": "!=",
+            "right": "seen-reply"
+        }
+    }
+]
+
+# ct status {expected, seen-reply, assured, confirmed, dying}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": {
+                "set": [
+                    "expected",
+                    "seen-reply",
+                    "assured",
+                    "confirmed",
+                    "dying"
+                ]
+            }
+        }
+    }
+]
+
+# ct status expected,seen-reply,assured,confirmed,snat,dnat,dying
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": [
+                "expected",
+                "seen-reply",
+                "assured",
+                "confirmed",
+                "snat",
+                "dnat",
+                "dying"
+            ]
+        }
+    }
+]
+
+# ct status snat
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": "snat"
+        }
+    }
+]
+
+# ct status dnat
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "status"
+                }
+            },
+            "right": "dnat"
+        }
+    }
+]
+
+# ct mark 0
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": 0
+        }
+    }
+]
+
+# ct mark or 0x23 == 0x11
+[
+    {
+        "match": {
+            "left": {
+                "|": [
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    },
+                    "0x23"
+                ]
+            },
+            "op": "==",
+            "right": "0x11"
+        }
+    }
+]
+
+# ct mark or 0x3 != 0x1
+[
+    {
+        "match": {
+            "left": {
+                "|": [
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    },
+                    "0x3"
+                ]
+            },
+            "op": "!=",
+            "right": "0x1"
+        }
+    }
+]
+
+# ct mark and 0x23 == 0x11
+[
+    {
+        "match": {
+            "left": {
+                "&": [
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    },
+                    "0x23"
+                ]
+            },
+            "op": "==",
+            "right": "0x11"
+        }
+    }
+]
+
+# ct mark and 0x3 != 0x1
+[
+    {
+        "match": {
+            "left": {
+                "&": [
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    },
+                    "0x3"
+                ]
+            },
+            "op": "!=",
+            "right": "0x1"
+        }
+    }
+]
+
+# ct mark xor 0x23 == 0x11
+[
+    {
+        "match": {
+            "left": {
+		"^": [
+		    {
+                        "ct": {
+                            "key": "mark"
+                        }
+		    },
+		    "0x23"
+		]
+            },
+            "right": "0x11"
+        }
+    }
+]
+
+# ct mark xor 0x3 != 0x1
+[
+    {
+        "match": {
+            "left": {
+		"^": [
+		    {
+                        "ct": {
+                            "key": "mark"
+                        }
+		    },
+		    "0x3"
+		]
+            },
+            "op": "!=",
+            "right": "0x1"
+        }
+    }
+]
+
+# ct mark 0x00000032
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": "0x00000032"
+        }
+    }
+]
+
+# ct mark != 0x00000032
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "op": "!=",
+            "right": "0x00000032"
+        }
+    }
+]
+
+# ct mark 0x00000032-0x00000045
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": {
+                "range": [ "0x00000032", "0x00000045" ]
+            }
+        }
+    }
+]
+
+# ct mark != 0x00000032-0x00000045
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "range": [ "0x00000032", "0x00000045" ]
+            }
+        }
+    }
+]
+
+# ct mark {0x32, 0x2222, 0x42de3}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": {
+                "set": [
+                    "0x32",
+                    "0x2222",
+                    "0x42de3"
+                ]
+            }
+        }
+    }
+]
+
+# ct mark {0x32-0x2222, 0x4444-0x42de3}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": {
+                "set": [
+                    {
+                        "range": [ "0x32", "0x2222" ]
+                    },
+                    {
+                        "range": [ "0x4444", "0x42de3" ]
+                    }
+                ]
+            }
+        }
+    }
+]
+
+# ct mark != {0x32, 0x2222, 0x42de3}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "set": [
+                    "0x32",
+                    "0x2222",
+                    "0x42de3"
+                ]
+            }
+        }
+    }
+]
+
+# ct mark set 0x11 xor 0x1331
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": { "^": [ "0x11", "0x1331" ] }
+        }
+    }
+]
+
+# ct mark set 0x11333 and 0x11
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": { "&": [ "0x11333", "0x11" ] }
+        }
+    }
+]
+
+# ct mark set 0x12 or 0x11
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": { "|": [ "0x12", "0x11" ] }
+        }
+    }
+]
+
+# ct mark set 0x11
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": "0x11"
+        }
+    }
+]
+
+# ct mark set mark
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": {
+                "meta": "mark"
+            }
+        }
+    }
+]
+
+# ct mark set mark map { 1 : 10, 2 : 20, 3 : 30 }
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "mark"
+                }
+            },
+            "right": {
+                "map": {
+                    "left": {
+                        "meta": "mark"
+                    },
+                    "right": {
+                        "set": [
+                            [ 1, 10 ],
+                            [ 2, 20 ],
+                            [ 3, 30 ]
+                        ]
+                    }
+                }
+            }
+        }
+    }
+]
+
+# ct expiration 30
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "right": 30
+        }
+    }
+]
+
+# ct expiration 22
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "right": 22
+        }
+    }
+]
+
+# ct expiration != 233
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "op": "!=",
+            "right": 233
+        }
+    }
+]
+
+# ct expiration 33-45
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "right": {
+                "range": [ 33, 45 ]
+            }
+        }
+    }
+]
+
+# ct expiration != 33-45
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "range": [ 33, 45 ]
+            }
+        }
+    }
+]
+
+# ct expiration {33, 55, 67, 88}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "right": {
+                "set": [
+                    33,
+                    55,
+                    67,
+                    88
+                ]
+            }
+        }
+    }
+]
+
+# ct expiration != {33, 55, 67, 88}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "set": [
+                    33,
+                    55,
+                    67,
+                    88
+                ]
+            }
+        }
+    }
+]
+
+# ct expiration {33-55}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "right": {
+                "set": [
+                    {
+                        "range": [ 33, 55 ]
+                    }
+                ]
+            }
+        }
+    }
+]
+
+# ct expiration != {33-55}
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "expiration"
+                }
+            },
+            "op": "!=",
+            "right": {
+                "set": [
+                    {
+                        "range": [ 33, 55 ]
+                    }
+                ]
+            }
+        }
+    }
+]
+
+# ct helper "ftp"
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "helper"
+                }
+            },
+            "right": "ftp"
+        }
+    }
+]
+
+# ct state . ct mark { new . 0x12345678}
+[
+    {
+        "match": {
+            "left": {
+                "concat": [
+                    {
+                        "ct": {
+                            "key": "state"
+                        }
+                    },
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    }
+                ]
+            },
+            "right": {
+                "set": [
+                    {
+                        "concat": [
+                            "new",
+                            "0x12345678"
+                        ]
+                    }
+                ]
+            }
+        }
+    }
+]
+
+# ct state . ct mark { new . 0x12345678, new . 0x34127856, established . 0x12785634}
+[
+    {
+        "match": {
+            "left": {
+                "concat": [
+                    {
+                        "ct": {
+                            "key": "state"
+                        }
+                    },
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    }
+                ]
+            },
+            "right": {
+                "set": [
+                    { "concat": [ "new", "0x12345678" ] },
+                    { "concat": [ "new", "0x34127856" ] },
+                    { "concat": [ "established", "0x12785634" ] }
+                ]
+            }
+        }
+    }
+]
+
+# ct direction . ct mark { original . 0x12345678}
+[
+    {
+        "match": {
+            "left": {
+                "concat": [
+                    {
+                        "ct": {
+                            "key": "direction"
+                        }
+                    },
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    }
+                ]
+            },
+            "right": {
+                "set": [
+                    {
+                        "concat": [
+                            "original",
+                            "0x12345678"
+                        ]
+                    }
+                ]
+            }
+        }
+    }
+]
+
+# ct state . ct mark vmap { new . 0x12345678 : drop}
+[
+    {
+        "map": {
+            "left": {
+                "concat": [
+                    {
+                        "ct": {
+                            "key": "state"
+                        }
+                    },
+                    {
+                        "ct": {
+                            "key": "mark"
+                        }
+                    }
+                ]
+            },
+            "right": {
+                "set": [
+                    [
+                        {
+                            "concat": [
+                                "new",
+                                "0x12345678"
+                            ]
+                        },
+                        {
+                            "drop": null
+                        }
+                    ]
+                ]
+            }
+        }
+    }
+]
+
+# ct original bytes > 100000
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "dir": "original",
+                    "key": "bytes"
+                }
+            },
+            "op": ">",
+            "right": 100000
+        }
+    }
+]
+
+# ct reply packets < 100
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "dir": "reply",
+                    "key": "packets"
+                }
+            },
+            "op": "<",
+            "right": 100
+        }
+    }
+]
+
+# ct bytes > 100000
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "bytes"
+                }
+            },
+            "op": ">",
+            "right": 100000
+        }
+    }
+]
+
+# ct avgpkt > 200
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "avgpkt"
+                }
+            },
+            "op": ">",
+            "right": 200
+        }
+    }
+]
+
+# ct original avgpkt < 500
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "dir": "original",
+                    "key": "avgpkt"
+                }
+            },
+            "op": "<",
+            "right": 500
+        }
+    }
+]
+
+# ct event set new
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": "new"
+        }
+    }
+]
+
+# ct event set new | related | destroy | label
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": [
+                "new",
+                "related",
+                "destroy",
+                "label"
+            ]
+        }
+    }
+]
+
+# ct event set new,related,destroy,label
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": [
+                "new",
+                "related",
+                "destroy",
+                "label"
+            ]
+        }
+    }
+]
+
+# ct event set new,destroy
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": [
+                "new",
+                "destroy"
+            ]
+        }
+    }
+]
+
+# ct event set 1
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct event set 0x0
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "event"
+                }
+            },
+            "right": "0x0"
+        }
+    }
+]
+
+# ct label 127
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "label"
+                }
+            },
+            "right": 127
+        }
+    }
+]
+
+# ct label set 127
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "label"
+                }
+            },
+            "right": 127
+        }
+    }
+]
+
+# ct zone 0
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "zone"
+                }
+            },
+            "right": 0
+        }
+    }
+]
+
+# ct zone 23
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "key": "zone"
+                }
+            },
+            "right": 23
+        }
+    }
+]
+
+# ct original zone 1
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "dir": "original",
+                    "key": "zone"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct reply zone 1
+[
+    {
+        "match": {
+            "left": {
+                "ct": {
+                    "dir": "reply",
+                    "key": "zone"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct zone set 1
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "zone"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct original zone set 1
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "dir": "original",
+                    "key": "zone"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct reply zone set 1
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "dir": "reply",
+                    "key": "zone"
+                }
+            },
+            "right": 1
+        }
+    }
+]
+
+# ct zone set mark map { 1 : 1,  2 : 2 }
+[
+    {
+        "mangle": {
+            "left": {
+                "ct": {
+                    "key": "zone"
+                }
+            },
+            "right": {
+                "map": {
+                    "left": {
+                        "meta": "mark"
+                    },
+                    "right": {
+                        "set": [
+                            [ 1, 1 ],
+                            [ 2, 2 ]
+                        ]
+                    }
+                }
+            }
+        }
+    }
+]
+
+# notrack
+[
+    {
+        "notrack": null
+    }
+]
+
-- 
cgit v1.2.3