From 6939b8b3fdb6d90f76883e65524017180e065608 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 16 Jun 2017 21:52:32 +0200 Subject: tests: restrict ct saddr test to inet family any/ct.t: ERROR: line 94: src/nft add rule --debug=netlink ip6 test-ip6 output meta nfproto ipv4 ct original saddr 1.2.3.4: This rule should not have failed. Actually, this failure is "ok; we can't find upper layer protocol in this case, but even if we'd "fix" this it is still non-sensical, meta nfproto ipv4, but family is ipv6 --> rule would never match. First move this to an inet-specific test. A followup patch will reject meta nfproto for all families except inet. Reported-by: Pablo Neira Ayuso Signed-off-by: Florian Westphal Acked-by: Pablo Neira Ayuso --- tests/py/inet/ct.t.payload | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 tests/py/inet/ct.t.payload (limited to 'tests/py/inet/ct.t.payload') diff --git a/tests/py/inet/ct.t.payload b/tests/py/inet/ct.t.payload new file mode 100644 index 00000000..21c74581 --- /dev/null +++ b/tests/py/inet/ct.t.payload @@ -0,0 +1,13 @@ +# meta nfproto ipv4 ct original saddr 1.2.3.4 +ip test-ip4 output + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x00000002 ] + [ ct load src => reg 1 , dir original ] + [ cmp eq reg 1 0x04030201 ] + +# meta nfproto ipv6 ct original saddr ::1 +inet test-inet input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x0000000a ] + [ ct load src => reg 1 , dir original ] + [ cmp eq reg 1 0x00000000 0x00000000 0x00000000 0x01000000 ] -- cgit v1.2.3