On 02/18/2011 10:12 AM, Eric Blake wrote:
On 02/18/2011 08:04 AM, Stefan Berger wrote:
On 02/14/2011 02:09 PM, Stefan Berger wrote:
On 02/14/2011 11:44 AM, Eric Blake wrote:
On 02/14/2011 08:09 AM, Stefan Berger wrote:
This patch adjusts the tck test cases following the reordering of the
match extensions relative to the state match in libvirt.
-RETURN udp -- 0.0.0.0/0 10.1.2.3 MAC
01:02:03:04:05:06 DSCP match 0x22/* udp rule */ udp spts:291:400
Here, there's a space between 0x22 and udp, after you strip the comment.
This is all iptables output and seems to be a problem of iptables
sometimes omitting spaces. It looks like a comment rule automatically
adds a space after it ...
dpts:564:1092 state NEW,ESTABLISHED ctdir REPLY
+RETURN udp -- 0.0.0.0/0 10.1.2.3 MAC
01:02:03:04:05:06 DSCP match 0x22udp spts:291:400 dpts:564:1092 state
But that space is lost here. Does the libvirt side of the patch need
fixing?
... while the DSCP match 0x22 forgets to add a space. This is not a
libvirt problem.
Stefan
ACK?
Yes; it matches the latest libvirt release, and as you say, the output
issues is an iptables bug (have you reported it there?). ACK.
I'll push and file a bugzilla with iptables.
Stefan
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list