This resolves the parsing problem reported by Phil. First patch is his test case, second patch is an (unrelated) fix for SYNPROXY scoping (lack of close). Last patch fixes closing with nested scopes, where we exited a scope too early. Florian Westphal (2): parser: add missing synproxy scope closure scanner: don't pop active flex scanner scope Phil Sutter (1): tests/py: Add a test for failing ipsec after counter include/parser.h | 3 +++ src/parser_bison.y | 2 +- src/scanner.l | 11 +++++++++++ tests/py/inet/ipsec.t | 2 ++ tests/py/inet/ipsec.t.json | 21 +++++++++++++++++++++ tests/py/inet/ipsec.t.payload | 6 ++++++ 6 files changed, 44 insertions(+), 1 deletion(-) -- 2.35.1