diff options
| author | Stephen Suryaputra <ssuryaextr@gmail.com> | 2019-07-03 20:30:52 -0400 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-07-04 14:29:08 +0200 |
| commit | 226a0e072d5c1edeb53cb61b959b011168c5c29a (patch) | |
| tree | 07e43268efe15dc8b64b8ca9baca71e02239213f /tests/py/ip6/srh.t.payload | |
| parent | 1694c01c30fba06461ca82ede070bf6a9cd9a4db (diff) | |
exthdr: add support for matching IPv4 options
Add capability to have rules matching IPv4 options. This is developed
mainly to support dropping of IP packets with loose and/or strict source
route route options.
Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/py/ip6/srh.t.payload')
| -rw-r--r-- | tests/py/ip6/srh.t.payload | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/tests/py/ip6/srh.t.payload b/tests/py/ip6/srh.t.payload index a2a46f13..b6247456 100644 --- a/tests/py/ip6/srh.t.payload +++ b/tests/py/ip6/srh.t.payload @@ -1,11 +1,11 @@ # srh last-entry 0 ip6 test-ip6 input - [ exthdr load 1b @ 43 + 4 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 4 => reg 1 ] [ cmp eq reg 1 0x00000000 ] # srh last-entry 127 ip6 test-ip6 input - [ exthdr load 1b @ 43 + 4 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 4 => reg 1 ] [ cmp eq reg 1 0x0000007f ] # srh last-entry { 0, 4-127, 255 } @@ -13,17 +13,17 @@ __set%d test-ip6 7 size 5 __set%d test-ip6 0 element 00000000 : 0 [end] element 00000001 : 1 [end] element 00000004 : 0 [end] element 00000080 : 1 [end] element 000000ff : 0 [end] userdata = { ip6 test-ip6 input - [ exthdr load 1b @ 43 + 4 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 4 => reg 1 ] [ lookup reg 1 set __set%d ] # srh flags 0 ip6 test-ip6 input - [ exthdr load 1b @ 43 + 5 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 5 => reg 1 ] [ cmp eq reg 1 0x00000000 ] # srh flags 127 ip6 test-ip6 input - [ exthdr load 1b @ 43 + 5 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 5 => reg 1 ] [ cmp eq reg 1 0x0000007f ] # srh flags { 0, 4-127, 255 } @@ -31,17 +31,17 @@ __set%d test-ip6 7 size 5 __set%d test-ip6 0 element 00000000 : 0 [end] element 00000001 : 1 [end] element 00000004 : 0 [end] element 00000080 : 1 [end] element 000000ff : 0 [end] userdata = { ip6 test-ip6 input - [ exthdr load 1b @ 43 + 5 => reg 1 ] + [ exthdr load ipv6 1b @ 43 + 5 => reg 1 ] [ lookup reg 1 set __set%d ] # srh tag 0 ip6 test-ip6 input - [ exthdr load 2b @ 43 + 6 => reg 1 ] + [ exthdr load ipv6 2b @ 43 + 6 => reg 1 ] [ cmp eq reg 1 0x00000000 ] # srh tag 127 ip6 test-ip6 input - [ exthdr load 2b @ 43 + 6 => reg 1 ] + [ exthdr load ipv6 2b @ 43 + 6 => reg 1 ] [ cmp eq reg 1 0x00007f00 ] # srh tag { 0, 4-127, 0xffff } @@ -49,16 +49,16 @@ __set%d test-ip6 7 size 5 __set%d test-ip6 0 element 00000000 : 0 [end] element 00000100 : 1 [end] element 00000400 : 0 [end] element 00008000 : 1 [end] element 0000ffff : 0 [end] userdata = { ip6 test-ip6 input - [ exthdr load 2b @ 43 + 6 => reg 1 ] + [ exthdr load ipv6 2b @ 43 + 6 => reg 1 ] [ lookup reg 1 set __set%d ] # srh sid[1] dead::beef ip6 test-ip6 input - [ exthdr load 16b @ 43 + 8 => reg 1 ] + [ exthdr load ipv6 16b @ 43 + 8 => reg 1 ] [ cmp eq reg 1 0x0000adde 0x00000000 0x00000000 0xefbe0000 ] # srh sid[2] dead::beef ip6 test-ip6 input - [ exthdr load 16b @ 43 + 24 => reg 1 ] + [ exthdr load ipv6 16b @ 43 + 24 => reg 1 ] [ cmp eq reg 1 0x0000adde 0x00000000 0x00000000 0xefbe0000 ] |