netdev - [PATCH iproute2/net-next repost 0/3] tc: flower: support masked ICMP code and type match

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Thu,  9 Feb 2017 14:48:58 +0100
From:   Simon Horman <simon.horman@...ronome.com>
To:     Stephen Hemminger <stephen@...workplumber.org>
Cc:     Jiri Pirko <jiri@...nulli.us>,
        Dinan Gunawardena <dinan.gunawardena@...ronome.com>,
        netdev@...r.kernel.org, oss-drivers@...ronome.com,
        Simon Horman <simon.horman@...ronome.com>
Subject: [PATCH iproute2/net-next repost 0/3] tc: flower: support masked ICMP code and type match

Hi,

this short series allows the tc tool to configure masked matches on the
ICMP code and type. Unmasked matches are already supported by the tool.

This does not depend on any kernel changes as support for both masked and
unmasked matches were added to the kernel at the same time.

Sample usage:

tc qdisc add dev eth0 ingress
tc filter add dev eth0 protocol ipv6 parent ffff: flower \
        indev eth0 ip_proto icmpv6 type 128/240 code 0 action drop

Reposting after breaking out of a larger patchset.

Simon Horman (3):
  tc: flower: provide generic masked u8 parser helper
  tc: flower: provide generic masked u8 print helper
  tc: flower: support masked ICMP code and type match

 man/man8/tc-flower.8 |  16 ++++--
 tc/f_flower.c        | 158 ++++++++++++++++++++++++++++++++++-----------------
 2 files changed, 119 insertions(+), 55 deletions(-)

-- 
2.7.0.rc3.207.g0ac5344