From 7e1ff143442c6c9428f2a1cdb7c751216407437c Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 16 Jun 2017 21:26:41 +0200 Subject: tests: restrict meta nfproto test cases to inet family Followup patch will reject meta nfproto for non-inet families. Signed-off-by: Florian Westphal Acked-by: Pablo Neira Ayuso --- tests/py/inet/meta.t | 10 ++++++++++ tests/py/inet/meta.t.payload | 25 +++++++++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 tests/py/inet/meta.t create mode 100644 tests/py/inet/meta.t.payload (limited to 'tests/py/inet') diff --git a/tests/py/inet/meta.t b/tests/py/inet/meta.t new file mode 100644 index 00000000..723dd46c --- /dev/null +++ b/tests/py/inet/meta.t @@ -0,0 +1,10 @@ +:input;type filter hook input priority 0 +:ingress;type filter hook ingress device lo priority 0 + +*inet;test-inet;input + +meta nfproto ipv4;ok +meta nfproto ipv6;ok +meta nfproto {ipv4, ipv6};ok +meta nfproto != {ipv4, ipv6};ok + diff --git a/tests/py/inet/meta.t.payload b/tests/py/inet/meta.t.payload new file mode 100644 index 00000000..8b6759a1 --- /dev/null +++ b/tests/py/inet/meta.t.payload @@ -0,0 +1,25 @@ +# meta nfproto ipv4 +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x00000002 ] + +# meta nfproto ipv6 +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x0000000a ] + +# meta nfproto {ipv4, ipv6} +__set%d test-ip4 3 +__set%d test-ip4 0 + element 00000002 : 0 [end] element 0000000a : 0 [end] +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ lookup reg 1 set __set%d ] + +# meta nfproto != {ipv4, ipv6} +__set%d test-ip4 3 +__set%d test-ip4 0 + element 00000002 : 0 [end] element 0000000a : 0 [end] +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ lookup reg 1 set __set%d 0x1 ] -- cgit v1.2.3