diff options
author | Phil Sutter <phil@nwl.cc> | 2018-08-29 16:23:22 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-08-30 12:19:36 +0200 |
commit | 2a4a5a2c8ae21f2bcf7e81b5eafea91d799ee88a (patch) | |
tree | 6dc5e3d0c196c6ec2bff0d22367c0875bdb32f92 /doc/libnftables-json.adoc | |
parent | 0ab82a84ddd25f742f18c1becbf78a74fcec2dce (diff) |
JSON: Make meta statement/expression extensible
Lessons learned from fwd statement: We must not assume a given
statement/expression may not receive further properties in the future.
Therefore make meta value an object with a property "key" instead of
just a string containing the key name.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc/libnftables-json.adoc')
-rw-r--r-- | doc/libnftables-json.adoc | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/doc/libnftables-json.adoc b/doc/libnftables-json.adoc index e51e9d40..058573df 100644 --- a/doc/libnftables-json.adoc +++ b/doc/libnftables-json.adoc @@ -1060,7 +1060,19 @@ existence check in a *match* statement with boolean on right hand side. === META [verse] -*{ "meta":* 'STRING' *}* +____ +*{ "meta": { + "key":* 'META_KEY' +*}}* + +'META_KEY' := *"length"* | *"protocol"* | *"priority"* | *"random"* | *"mark"* | + *"iif"* | *"iifname"* | *"iiftype"* | *"oif"* | *"oifname"* | + *"oiftype"* | *"skuid"* | *"skgid"* | *"nftrace"* | + *"rtclassid"* | *"ibriport"* | *"obriport"* | *"ibridgename"* | + *"obridgename"* | *"pkttype"* | *"cpu"* | *"iifgroup"* | + *"oifgroup"* | *"cgroup"* | *"nfproto"* | *"l4proto"* | + *"secpath"* +____ Create a reference to packet meta data. |