Hi Serguei, On Wed, Dec 18, 2019 at 05:01:33PM +0000, Serguei Bezverkhi (sbezverk) wrote: > I came across a situation when I need to match against L4 proto (tcp/udp), L3 daddr and L4 port(port value) with vmap. > > Vmap looks like this: > > map no-endpoints-services { > type inet_proto . ipv4_addr . inet_service : verdict > } > > I was wondering if somebody could come up with a single line rule with reference to that vmap. Should work using th header expression: | ip protocol . ip daddr . th dport vmap @no-endpoints-services Cheers, Phil