1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
|
# dccp sport 21-35
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp gte reg 1 0x00001500 ]
[ cmp lte reg 1 0x00002300 ]
# dccp sport != 21-35
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ range neq reg 1 0x00001500 0x00002300 ]
# dccp sport {23, 24, 25}
__set%d test-inet 3
__set%d test-inet 0
element 00001700 : 0 [end] element 00001800 : 0 [end] element 00001900 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d ]
# dccp sport != {23, 24, 25}
__set%d test-inet 3
__set%d test-inet 0
element 00001700 : 0 [end] element 00001800 : 0 [end] element 00001900 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# dccp sport { 20-50 }
__set%d test-ip4 7
__set%d test-ip4 0
element 00000000 : 1 [end] element 00001400 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d ]
# dccp sport ftp-data - re-mail-ck
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp gte reg 1 0x00001400 ]
[ cmp lte reg 1 0x00003200 ]
# dccp sport 20-50
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ cmp gte reg 1 0x00001400 ]
[ cmp lte reg 1 0x00003200 ]
# dccp sport { 20-50}
__set%d test-ip4 7
__set%d test-ip4 0
element 00000000 : 1 [end] element 00001400 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d ]
# dccp sport != { 20-50}
__set%d test-ip4 7
__set%d test-ip4 0
element 00000000 : 1 [end] element 00001400 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 0 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# dccp dport {23, 24, 25}
__set%d test-ip4 3
__set%d test-ip4 0
element 00001700 : 0 [end] element 00001800 : 0 [end] element 00001900 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d ]
# dccp dport != {23, 24, 25}
__set%d test-ip4 3
__set%d test-ip4 0
element 00001700 : 0 [end] element 00001800 : 0 [end] element 00001900 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# dccp dport { 20-50}
__set%d test-ip4 7
__set%d test-ip4 0
element 00000000 : 1 [end] element 00001400 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d ]
# dccp dport != { 20-50}
__set%d test-ip4 7
__set%d test-ip4 0
element 00000000 : 1 [end] element 00001400 : 0 [end] element 00003300 : 1 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 2b @ transport header + 2 => reg 1 ]
[ lookup reg 1 set __set%d 0x1 ]
# dccp type {request, response, data, ack, dataack, closereq, close, reset, sync, syncack}
__set%d test-inet 3
__set%d test-inet 0
element 00000000 : 0 [end] element 00000002 : 0 [end] element 00000004 : 0 [end] element 00000006 : 0 [end] element 00000008 : 0 [end] element 0000000a : 0 [end] element 0000000c : 0 [end] element 0000000e : 0 [end] element 00000010 : 0 [end] element 00000012 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 1b @ transport header + 8 => reg 1 ]
[ bitwise reg 1 = (reg=1 & 0x0000001e ) ^ 0x00000000 ]
[ lookup reg 1 set __set%d ]
# dccp type != {request, response, data, ack, dataack, closereq, close, reset, sync, syncack}
__set%d test-inet 3
__set%d test-inet 0
element 00000000 : 0 [end] element 00000002 : 0 [end] element 00000004 : 0 [end] element 00000006 : 0 [end] element 00000008 : 0 [end] element 0000000a : 0 [end] element 0000000c : 0 [end] element 0000000e : 0 [end] element 00000010 : 0 [end] element 00000012 : 0 [end]
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 1b @ transport header + 8 => reg 1 ]
[ bitwise reg 1 = (reg=1 & 0x0000001e ) ^ 0x00000000 ]
[ lookup reg 1 set __set%d 0x1 ]
# dccp type request
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 1b @ transport header + 8 => reg 1 ]
[ bitwise reg 1 = (reg=1 & 0x0000001e ) ^ 0x00000000 ]
[ cmp eq reg 1 0x00000000 ]
# dccp type != request
inet test-inet input
[ meta load l4proto => reg 1 ]
[ cmp eq reg 1 0x00000021 ]
[ payload load 1b @ transport header + 8 => reg 1 ]
[ bitwise reg 1 = (reg=1 & 0x0000001e ) ^ 0x00000000 ]
[ cmp neq reg 1 0x00000000 ]
|
