This patch adds test case for adjacent payload expression. Signed-off-by: Varsha Rao <rvarsha016@xxxxxxxxx> --- tests/shell/testcases/transactions/0024rule_0 | 44 +++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100755 tests/shell/testcases/transactions/0024rule_0 diff --git a/tests/shell/testcases/transactions/0024rule_0 b/tests/shell/testcases/transactions/0024rule_0 new file mode 100755 index 0000000..7644ce8 --- /dev/null +++ b/tests/shell/testcases/transactions/0024rule_0 @@ -0,0 +1,44 @@ +#!/bin/bash + +# Tests for adjacent payload expressions. + +set -e + +tmpfile=$(mktemp) +if [ ! -w $tmpfile ] ; then + echo "Failed to create tmp file" >&2 + exit 0 +fi + +trap "rm -rf $tmpfile" EXIT # cleanup if aborted + +RULESET="add table x +add chain x y +add rule x y tcp sport 1024 tcp dport 22 counter +add rule x y ip saddr 192.168.0.1 ip daddr 192.168.0.100 counter +add rule x y tcp sequence 0 tcp sport 1024 tcp dport 22 +add rule x y tcp sport 1024 tcp dport 22 tcp sequence 0" + +echo "$RULESET" > $tmpfile +$NFT -f $tmpfile +if [ $? -ne 0 ] ; then + echo "E: unable to load good ruleset" >&2 + exit 1 +fi + +EXPECTED="table ip x { + chain y { + tcp sport 1024 tcp dport ssh counter packets 0 bytes 0 + ip saddr 192.168.0.1 ip daddr 192.168.0.100 counter packets 0 bytes 0 + tcp sport 1024 tcp dport ssh tcp sequence 0 + tcp sport 1024 tcp dport ssh tcp sequence 0 + } +}" + +GET="$($NFT list ruleset)" + +if [ "$EXPECTED" != "$GET" ] ; then + DIFF="$(which diff)" + [ -x $DIFF ] && $DIFF -u <(echo "$EXPECTED") <(echo "$GET") + exit 1 +fi -- 2.13.6 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html