Re: Numen with reference to vmap

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Still no luck (

@th,16,16

Error: can not use variable sized data types (integer) in concat expressions
add rule ipv4table k8s-filter-services ip protocol . ip daddr . @th,16,16 vmap @no-endpoints-services
                                                        ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^

Error: syntax error, unexpected dport, expecting comma
add rule ipv4table k8s-filter-services ip protocol . ip daddr . @th dport vmap @no-endpoints-services
                                                                                                            ^^^^^

In first case the syntax looks ok,  but I am not sure if vlam type needs to be changed 

type inet_proto . ipv6_addr . inet_service : verdict   --> type inet_proto . ipv6_addr . integer: verdict.    ???

Thank you
Serguei


On 2019-12-18, 2:58 PM, "Laura Garcia" <nevola@xxxxxxxxx> wrote:

    On Wed, Dec 18, 2019 at 8:44 PM Serguei Bezverkhi (sbezverk)
    <sbezverk@xxxxxxxxx> wrote:
    >
    > Error: syntax error, unexpected th
    >
    > add rule ipv4table k8s-filter-services ip protocol . ip daddr . th dport vmap @no-endpoints-services
    >                                                                                                           ^^
    
    Try this:
    
    ... @th dport vmap ...
    
    or
    
    ... @th,16,16 vmap ...
    





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux