netdev - Re: [PATCH iproute2/net-next repost 0/3] tc: flower: support masked ICMP code and type match

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20170218161424.4f0f9a83@xeon-e3>
Date:   Sat, 18 Feb 2017 16:14:24 -0800
From:   Stephen Hemminger <stephen@...workplumber.org>
To:     Simon Horman <simon.horman@...ronome.com>
Cc:     Jiri Pirko <jiri@...nulli.us>,
        Dinan Gunawardena <dinan.gunawardena@...ronome.com>,
        netdev@...r.kernel.org, oss-drivers@...ronome.com
Subject: Re: [PATCH iproute2/net-next repost 0/3] tc: flower: support masked
 ICMP code and type match

On Thu,  9 Feb 2017 14:48:58 +0100
Simon Horman <simon.horman@...ronome.com> wrote:

> Hi,
> 
> this short series allows the tc tool to configure masked matches on the
> ICMP code and type. Unmasked matches are already supported by the tool.
> 
> This does not depend on any kernel changes as support for both masked and
> unmasked matches were added to the kernel at the same time.
> 
> Sample usage:
> 
> tc qdisc add dev eth0 ingress
> tc filter add dev eth0 protocol ipv6 parent ffff: flower \
>         indev eth0 ip_proto icmpv6 type 128/240 code 0 action drop
> 
> Reposting after breaking out of a larger patchset.
> 
> Simon Horman (3):
>   tc: flower: provide generic masked u8 parser helper
>   tc: flower: provide generic masked u8 print helper
>   tc: flower: support masked ICMP code and type match
> 
>  man/man8/tc-flower.8 |  16 ++++--
>  tc/f_flower.c        | 158 ++++++++++++++++++++++++++++++++++-----------------
>  2 files changed, 119 insertions(+), 55 deletions(-)
> 

Applied to net-next