These fail for kernels with 'CONFIG_NFT_EXTHDR_DCCP is not set', remove
the tests in anticipation of a future removal from both kernel and
nftables.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
dccp type != {request, response, data, ack, dataack, closereq, close, reset, sync, syncack};ok
dccp type request;ok
dccp type != request;ok
-
-dccp option 0 exists;ok
-dccp option 43 missing;ok
-dccp option 255 exists;ok
-dccp option 256 exists;fail
}
]
-# dccp option 0 exists
-[
- {
- "match": {
- "left": {
- "dccp option": {
- "type": 0
- }
- },
- "op": "==",
- "right": true
- }
- }
-]
-
-# dccp option 43 missing
-[
- {
- "match": {
- "left": {
- "dccp option": {
- "type": 43
- }
- },
- "op": "==",
- "right": false
- }
- }
-]
-
-# dccp option 255 exists
-[
- {
- "match": {
- "left": {
- "dccp option": {
- "type": 255
- }
- },
- "op": "==",
- "right": true
- }
- }
-]
[ bitwise reg 1 = ( reg 1 & 0x0000001e ) ^ 0x00000000 ]
[ cmp neq reg 1 0x00000000 ]
-# dccp option 0 exists
-ip test-inet input
- [ exthdr load 1b @ 0 + 0 present => reg 1 ]
- [ cmp eq reg 1 0x00000001 ]
-
-# dccp option 43 missing
-ip test-inet input
- [ exthdr load 1b @ 43 + 0 present => reg 1 ]
- [ cmp eq reg 1 0x00000000 ]
-
-# dccp option 255 exists
-ip test-inet input
- [ exthdr load 1b @ 255 + 0 present => reg 1 ]
- [ cmp eq reg 1 0x00000001 ]