[libvirt] [PATCH 2/3][TCK] nwfilter: test access via iterators

11 Jan 2012

      Test access to variables

--- scripts/nwfilter/nwfilter2vmtest.sh scripts/nwfilter/nwfilterxm scripts/nwfilter/nwfilterxm 3 files changed, 222 insertions(+)

Index: libvirt-tck/scripts/n ============================ --- libvirt-tck.orig/scripts +++ libvirt-tck/scripts/nwfi @@ -348,9 +348,15 @@ createVM() { <parameter <parameter <parameter +          <parameter <parameter <parameter <parameter +          <parameter +          <parameter +          <parameter +          <parameter +          <parameter </filterref> <target dev='${vmname}'/> </interface> Index: libvirt-tck/scripts/n ============================ --- /dev/null +++ libvirt-tck/scripts/nwfi @@ -0,0 +1,193 @@ +#iptables -L FI-vnet0 -n +Chain FI-vnet0 (1 references) +target     prot opt source +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +#iptables -L FO-vnet0 -n +Chain FO-vnet0 (1 references) +target     prot opt source +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     udp  --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     sctp --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     tcp  --  0.0.0.0/0 +ACCEPT     udp  --  1.1.1.1 +ACCEPT     udp  --  1.1.1.1 +ACCEPT     udp  --  1.1.1.1 +ACCEPT     udp  --  2.2.2.2 +ACCEPT     udp  --  2.2.2.2 +ACCEPT     udp  --  2.2.2.2 +ACCEPT     udp  --  3.3.3.3 +ACCEPT     udp  --  3.3.3.3 +ACCEPT     udp  --  3.3.3.3 +ACCEPT     sctp --  1.1.1.1 +ACCEPT     sctp --  2.2.2.2 +ACCEPT     sctp --  3.3.3.3 +#iptables -L HI-vnet0 -n +Chain HI-vnet0 (1 references) +target     prot opt source +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     tcp  --  1.1.1.1 +RETURN     tcp  --  2.2.2.2 +RETURN     tcp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     udp  --  1.1.1.1 +RETURN     udp  --  2.2.2.2 +RETURN     udp  --  3.3.3.3 +RETURN     sctp --  1.1.1.1 +RETURN     sctp --  2.2.2.2 +RETURN     sctp --  3.3.3.3 +#iptables -L libvirt-host-in +HI-vnet0 all -- 0.0.0.0/0 +#iptables -L libvirt-in +FI-vnet0 all -- 0.0.0.0/0 +#iptables -L libvirt-in-post +ACCEPT     all  --  0.0.0.0/0 +#iptables -L libvirt-out +FO-vnet0 all -- 0.0.0.0/0 +#iptables -L FORWARD +1    libvirt-in  all  --  0.0.0.0/0 +2    libvirt-out  all  --  0.0.0.0/0 +3    libvirt-in-post + Index: libvirt-tck/scripts/n ============================ --- /dev/null +++ libvirt-tck/scripts/nwfi @@ -0,0 +1,23 @@ +<filter name='tck-testcase' +  <uuid>5c6d49af-b071-61 +  <rule action='accept' +     <tcp  srcipaddr='$A' +  </rule> +  <rule action='accept' +     <udp  srcipaddr='$A[@1]' +  </rule> +  <rule action='accept' +     <sctp  srcipaddr='$A[@1]' +           dscp='3'/> +  </rule> +  <rule action='accept' +     <tcp srcipaddr='$A[@1]' +           dscp='4'/> +  </rule> +  <rule action='accept' +     <udp srcipaddr='$A[@1]' +  </rule> +  <rule action='accept' +     <sctp srcipaddr='$A' +  </rule> +</filter>

using different iterators. |    6 l2fwallout/iter-test2.fwall |  193 +++++++++++++++++ l2xmlin/iter-test2.xml      |   23 ++ wfilter/nwfilter2vmtest.sh ======================================= /nwfilter/nwfilter2vmtest.sh lter/nwfilter2vmtest.sh name='A' value='1.1.1.1'/> name='A' value='2.2.2.2'/> name='A' value='3.3.3.3'/> name='A' value='3.3.3.3'/> name='B' value='80'/> name='B' value='90'/> name='B' value='80'/> name='B' value='80'/> name='C' value='1080'/> name='C' value='1090'/> name='C' value='1100'/> name='C' value='1110'/> wfilter/nwfilterxml2fwallout/iter-test2.fwall ======================================= lter/nwfilterxml2fwallout/iter-test2.fwall destination 0.0.0.0/0           DSCP match 0x01tcp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x01tcp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x01tcp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY destination 1.1.1.1             DSCP match 0x01tcp dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x01tcp dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x01tcp dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x02udp dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x02udp dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x02udp dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x02udp dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x02udp dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x02udp dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x03sctp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x03sctp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x03sctp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x03sctp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x03sctp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x03sctp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x03sctp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x03sctp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x03sctp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x03sctp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x03sctp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x03sctp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1080 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1080 dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1080 dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1080 dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1090 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1090 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1090 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1090 dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1100 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1100 dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1100 dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1100 dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1110 dpt:80 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x04tcp spt:1110 dpt:90 state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x04tcp spt:1110 dpt:90 state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x04tcp spt:1110 dpt:90 state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x05state ESTABLISHED ctdir ORIGINAL 1.1.1.1             DSCP match 0x06state ESTABLISHED ctdir ORIGINAL 2.2.2.2             DSCP match 0x06state ESTABLISHED ctdir ORIGINAL 3.3.3.3             DSCP match 0x06state ESTABLISHED ctdir ORIGINAL destination 0.0.0.0/0           DSCP match 0x01tcp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x01tcp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x01tcp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:80 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x02udp spt:90 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x03sctp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1080 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1090 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1100 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:80 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 0.0.0.0/0           DSCP match 0x04tcp spt:90 dpt:1110 state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x05state NEW,ESTABLISHED ctdir REPLY 1.1.1.1             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY 2.2.2.2             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY 3.3.3.3             DSCP match 0x06state NEW,ESTABLISHED ctdir REPLY -n | grep vnet0 | tr -s " " 0.0.0.0/0 [goto] PHYSDEV match --physdev-in vnet0 -n | grep vnet0 | tr -s " " 0.0.0.0/0 [goto] PHYSDEV match --physdev-in vnet0 -n | grep vnet0 0.0.0.0/0           PHYSDEV match --physdev-in vnet0 -n | grep vnet0 | tr -s " " 0.0.0.0/0 [goto] PHYSDEV match --physdev-out vnet0 -n --line-number | grep libvirt 0.0.0.0/0 0.0.0.0/0 all  --  0.0.0.0/0            0.0.0.0/0 wfilter/nwfilterxml2xmlin/iter-test2.xml ======================================= lter/nwfilterxml2xmlin/iter-test2.xml chain='root'> 27-b4ec-6f8ed4b55335</uuid> direction='out'> srcportstart='$B[@0]' dscp='1'/> direction='out'> srcportstart='$B[@2]' dscp='2'/> direction='out'> srcportstart='$B[@2]' dstportstart='$C[@2]' direction='out'> srcportstart='$B[@2]' dstportstart='$C[@3]' direction='out'> dstipaddr='$A[@2]' dscp='5'/> direction='out'> dstipaddr='$A' dscp='6'/>

Stefan Berger

tags

participants (1)