path: root/extensions/
diff options
authorFlorian Westphal <>2022-09-23 14:17:25 +0200
committerFlorian Westphal <>2022-09-28 11:53:57 +0200
commitf1a02b3aba5f57e7359f15d7f4250ac3835ebf61 (patch)
tree6c6000c6f8d3d2210306538c5cb92c22bbac46d6 /extensions/
parentf315af1cf88714702dcc51dc00b109df3d52e9e9 (diff)
tests: extend native delinearize scriptHEADmaster
Feed nft-generated ruleset to iptables-nft. At this time, this will NOT pass. because dissector can handle meta l4proto tcp ip saddr but not ip saddr meta l4proto tcp In the latter case, iptables-nft picks up the immediate value (6) as the ip address, because the first one ( gets moved as PAYLOAD_PREV due to missing 'removal' of the CTX_PAYLOAD flag. This is error prone, so lets rewrite the dissector to track each register separately and auto-clear state on writes. Signed-off-by: Florian Westphal <> Acked-by: Phil Sutter <>
Diffstat (limited to 'extensions/')
0 files changed, 0 insertions, 0 deletions