# udp sport 80 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp eq reg 1 0x00005000 ] [ immediate reg 0 accept ] # udp sport != 60 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp neq reg 1 0x00003c00 ] [ immediate reg 0 accept ] # udp sport 50-70 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp gte reg 1 0x00003200 ] [ cmp lte reg 1 0x00004600 ] [ immediate reg 0 accept ] # udp sport != 50-60 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ cmp lt reg 1 0x00003200 ] [ cmp gt reg 1 0x00003c00 ] [ immediate reg 0 accept ] # udp sport { 49, 50} drop set%d test-ip4 3 set%d test-ip4 0 element 00003100 : 0 [end] element 00003200 : 0 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ lookup reg 1 set set%d ] [ immediate reg 0 drop ] # udp sport { 12-40} set%d test-ip4 7 set%d test-ip4 0 element 00000000 : 1 [end] element 00000c00 : 0 [end] element 00002900 : 1 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 0 => reg 1 ] [ lookup reg 1 set set%d ] # udp dport 80 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp eq reg 1 0x00005000 ] [ immediate reg 0 accept ] # udp dport != 60 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp neq reg 1 0x00003c00 ] [ immediate reg 0 accept ] # udp dport 70-75 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp gte reg 1 0x00004600 ] [ cmp lte reg 1 0x00004b00 ] [ immediate reg 0 accept ] # udp dport != 50-60 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ cmp lt reg 1 0x00003200 ] [ cmp gt reg 1 0x00003c00 ] [ immediate reg 0 accept ] # udp dport { 49, 50} drop set%d test-ip4 3 set%d test-ip4 0 element 00003100 : 0 [end] element 00003200 : 0 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ lookup reg 1 set set%d ] [ immediate reg 0 drop ] # udp dport { 70-75} accept set%d test-ip4 7 set%d test-ip4 0 element 00000000 : 1 [end] element 00004600 : 0 [end] element 00004c00 : 1 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 2 => reg 1 ] [ lookup reg 1 set set%d ] [ immediate reg 0 accept ] # udp length 6666 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ cmp eq reg 1 0x00000a1a ] # udp length != 6666 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ cmp neq reg 1 0x00000a1a ] # udp length 50-65 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ cmp gte reg 1 0x00003200 ] [ cmp lte reg 1 0x00004100 ] [ immediate reg 0 accept ] # udp length != 50-65 accept ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ cmp lt reg 1 0x00003200 ] [ cmp gt reg 1 0x00004100 ] [ immediate reg 0 accept ] # udp length { 50, 65} accept set%d test-ip4 3 set%d test-ip4 0 element 00003200 : 0 [end] element 00004100 : 0 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ lookup reg 1 set set%d ] [ immediate reg 0 accept ] # udp length { 35-50} set%d test-ip4 7 set%d test-ip4 0 element 00000000 : 1 [end] element 00002300 : 0 [end] element 00003300 : 1 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 4 => reg 1 ] [ lookup reg 1 set set%d ] # udp checksum 6666 drop ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ cmp eq reg 1 0x00000a1a ] [ immediate reg 0 drop ] # udp checksum 22 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ cmp eq reg 1 0x00001600 ] # udp checksum != 233 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ cmp neq reg 1 0x0000e900 ] # udp checksum 33-45 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ cmp gte reg 1 0x00002100 ] [ cmp lte reg 1 0x00002d00 ] # udp checksum != 33-45 ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ cmp lt reg 1 0x00002100 ] [ cmp gt reg 1 0x00002d00 ] # udp checksum { 33, 55, 67, 88} set%d test-ip4 3 set%d test-ip4 0 element 00002100 : 0 [end] element 00003700 : 0 [end] element 00004300 : 0 [end] element 00005800 : 0 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ lookup reg 1 set set%d ] # udp checksum { 33-55} set%d test-ip4 7 set%d test-ip4 0 element 00000000 : 1 [end] element 00002100 : 0 [end] element 00003800 : 1 [end] ip test-ip4 input [ payload load 1b @ network header + 9 => reg 1 ] [ cmp eq reg 1 0x00000011 ] [ payload load 2b @ transport header + 6 => reg 1 ] [ lookup reg 1 set set%d ]