# tcp sport 1 tcp dport 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 4b @ transport header + 0 => reg 1 ] [ cmp eq reg 1 0x02000100 ] # tcp sport != 1 tcp dport != 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp neq reg 1 0x00000100 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp neq reg 1 0x00000200 ] # tcp sport 1 tcp dport != 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp eq reg 1 0x00000100 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp neq reg 1 0x00000200 ] # tcp sport != 1 tcp dport 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp neq reg 1 0x00000100 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp eq reg 1 0x00000200 ] # meta l4proto != 6 th dport 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp neq reg 1 0x00000006 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp eq reg 1 0x00000200 ] # meta l4proto 6 tcp dport 22 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp eq reg 1 0x00001600 ] # tcp sport > 1 tcp dport > 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp gt reg 1 0x00000100 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp gt reg 1 0x00000200 ] # tcp sport 1 tcp dport > 2 ip test-ip4 input [ meta load l4proto => reg 1 ] [ cmp eq reg 1 0x00000006 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp eq reg 1 0x00000100 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp gt reg 1 0x00000200 ]