Re: [iptables PATCH 0/3] Extend xlate-test to replay results

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Nov 07, 2022 at 02:08:40PM +0100, Phil Sutter wrote:
> If nftables has libxtables support, it will utilize the .xlate callbacks
> to print compat expressions in native nftables syntax. Users may miss
> the fact that what they're seeing is not the reality and assume they may
> manipulate (including store and reload) the ruleset using nftables. This
> wasn't a big deal if iptables-nft understood all the translations
> libxtables offers.
> 
> To start catching up on this, add an optional replay mode to
> xlate-test.py checking if what was translated is correctly parsed back
> into the original input (or at least a semantical equivalent).
> 
> Patches 1 and 2 are prep work, patch 3 has the gory details.
> 
> Phil Sutter (3):
>   tests: xlate-test: Cleanup file reading loop
>   tests: xlate-test.py: Introduce run_proc()
>   tests: xlate-test: Replay results for reverse direction testing

Series applied.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux