tests/py: Support testing JSON input and output as well

This extends nft-test.py by optional JSON testing capabilities,
activated via '-j'/'--enable-json' parameter).

JSON testing happens for all rules which are supposed to work: After a
rule has been added and the existing tests (payload, ruleset listing
output) have been performed, basically the same test is done again using
a recorded JSON equivalent and (if necessary) a recorded listing output.

The code tries to ease new test case creation overhead by
auto-generating JSON equivalent input via listing the (non-JSON) rule in
JSON format. Also, differing netlink debug and listing output are stored
in *.got files to assist in analyzing/fixing failing test cases.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 169 insertions, 0 deletions

diff --git a/tests/py/any/log.t.json b/tests/py/any/log.t.json
new file mode 100644
index 00000000..9c89dff8
--- /dev/null
+++ b/tests/py/any/log.t.json
@@ -0,0 +1,169 @@
+# log
+[
+    {
+        "log": null
+    }
+]
+
+# log level emerg
+[
+    {
+        "log": {
+            "level": "emerg"
+        }
+    }
+]
+
+# log level alert
+[
+    {
+        "log": {
+            "level": "alert"
+        }
+    }
+]
+
+# log level crit
+[
+    {
+        "log": {
+            "level": "crit"
+        }
+    }
+]
+
+# log level err
+[
+    {
+        "log": {
+            "level": "err"
+        }
+    }
+]
+
+# log level warn
+[
+    {
+        "log": {
+            "level": "warn"
+	}
+    }
+]
+
+# log level notice
+[
+    {
+        "log": {
+            "level": "notice"
+        }
+    }
+]
+
+# log level info
+[
+    {
+        "log": {
+            "level": "info"
+        }
+    }
+]
+
+# log level debug
+[
+    {
+        "log": {
+            "level": "debug"
+        }
+    }
+]
+
+# log prefix aaaaa-aaaaaa group 2 snaplen 33
+[
+    {
+        "log": {
+            "group": 2,
+            "prefix": "aaaaa-aaaaaa",
+            "snaplen": 33
+        }
+    }
+]
+
+# log group 2 queue-threshold 2
+[
+    {
+        "log": {
+            "group": 2,
+            "queue-threshold": 2
+        }
+    }
+]
+
+# log group 2 snaplen 33
+[
+    {
+        "log": {
+            "group": 2,
+            "snaplen": 33
+        }
+    }
+]
+
+# log group 2 prefix "nft-test: "
+[
+    {
+        "log": {
+            "group": 2,
+            "prefix": "nft-test: "
+        }
+    }
+]
+
+# log flags all
+[
+    {
+        "log": {
+            "flags": "all"
+        }
+    }
+]
+
+# log level debug flags ip options flags skuid
+[
+    {
+        "log": {
+            "flags": [
+                "ip options",
+                "skuid"
+            ],
+            "level": "debug"
+        }
+    }
+]
+
+# log flags tcp sequence,options
+[
+    {
+        "log": {
+            "flags": [
+                "tcp sequence",
+                "tcp options"
+            ]
+        }
+    }
+]
+
+# log flags ip options flags ether flags skuid flags tcp sequence,options
+[
+    {
+        "log": {
+            "flags": [
+                "ip options",
+                "ether",
+                "skuid",
+                "tcp sequence",
+                "tcp options"
+            ]
+        }
+    }
+]
+