Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/pyroute2/netlink/rtnl/tcmsg/__pycache__/cls_basic.cpython-39.pyc
Ðазад
a ]�h ! � @ st d Z ddlZddlmZ ddlmZ ddlmZ ddlm Z m Z ddl m Z m Z dd � Zd d � ZG d d � d e�ZdS )a� basic +++++ Basic filter has multiple types supports. Examples with ipset matches:: # Prepare a simple match on an ipset at index 0 src # (the first ipset name that appears when running `ipset list`) match = [{"kind": "ipset", "index": 0, "mode": "src"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # The same match but inverted, simply add inverse flag match = [{"kind": "ipset", "index": 0, "mode": "src", "inverse": True}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Still one ipset but with multiple dimensions: # comma separated list of modes match = [{"kind": "ipset", "index": 0, "mode": "src,dst"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Now let's add multiple expressions (ipset 0 src and ipset 1 src) match = [{"kind": "ipset", "index": 0, "mode": "src", "relation": "and"}, {"kind": "ipset", "index": 1, "mode": "src"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # The same works with OR (ipset 0 src or ipset 1 src) match = [{"kind": "ipset", "index": 0, "mode": "src", "relation": "OR"}, {"kind": "ipset", "index": 1, "mode": "src"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) Examples with cmp matches:: # Repeating the example given in the man page match = [{"kind": "cmp", "layer": 2, "opnd": "gt", "align": "u16", "offset": 3, "mask": 0xff00, "value": 20}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Now, the same example but with variations # - use layer name instead of enum # - use operand sign instead of name match = [{"kind": "cmp", "layer": "transport", "opnd": ">","align": "u16", "offset": 3, "mask": 0xff00, "value": 20}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Again, the same example with all possible keywords even if they are # ignored match = [{"kind": "cmp", "layer": "tcp", "opnd": ">", "align": "u16", "offset": 3, "mask": 0xff00, "value": 20, "trans": False}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Another example, we want to work at the link layer # and filter incoming packets matching hwaddr 00:DE:AD:C0:DE:00 # OSI model tells us that the source hwaddr is at offset 0 of # the link layer. # Size of hwaddr is 6-bytes in length, so I use an u32 then an u16 # to do the complete match match = [{"kind": "cmp", "layer": "link", "opnd": "eq", "align": "u32", "offset": 0, "mask": 0xffffffff, "value": 0x00DEADC0, "relation": "and"}, {"kind": "cmp", "layer": "link", "opnd": "eq", "align": "u16", "offset": 4, "mask": 0xffff, "value": 0xDE00}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # As the man page says, here are the different key-value pairs you can use: # "layer": "link" or "eth" or 0 # "layer": "network" or "ip" or 1 # "layer": "transport" or "tcp" or 2 # "opnd": "eq" or "=" or 0 # "opnd": "gt" or ">" or 1 # "opnd": "lt" or "<" or 2 # "align": "u8" or "u16" or "u32" # "trans": True or False # "offset", "mask" and "value": any integer Examples with meta matches:: # Repeating the example given in the man page match = [{"kind": "meta", "object":{"kind": "nfmark", "opnd": "gt"}, "value": 24, "relation": "and"}, {"kind": "meta", "object":{"kind": "tcindex", "opnd": "eq"}, "value": 0xf0, "mask": 0xf0}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Now, the same example but with variations # - use operand sign instead of name match = [{"kind": "meta", "object":{"kind": "nfmark", "opnd": ">"}, "value": 24, "relation": "and"}, {"kind": "meta", "object":{"kind": "tcindex", "opnd": "="}, "value": 0xf0, "mask": 0xf0}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Another example given by the tc helper # meta(indev shift 1 eq "ppp") match = [{"kind": "meta", "object":{"kind": "dev", "opnd": "eq", "shift": 1}, "value": "ppp"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match) # Another example, drop every packets arriving on ifb0 match = [{"kind": "meta", "object":{"kind": "dev", "opnd": "eq"}, "value": "ifb0"}] ip.tc("add-filter", "basic", ifb0, parent=0x10000, classid=0x10010, match=match, action="drop") # As the man page says, here are the different key-value pairs you can use: # "opnd": "eq" or "=" or 0 # "opnd": "gt" or ">" or 1 # "opnd": "lt" or "<" or 2 # "shift": any integer between 0 and 255 included # "kind" object: see `tc filter add dev iface basic match 'meta(list)'` result # "value": any string if kind matches 'dev' or 'sk_bound_if', # any integer otherwise NOTES: When not specified, `inverse` flag is set to False. Do not specify `relation` keyword on the last expression or if there is only one expression. `relation` can be written using multiple format: "and", "AND", "&&", "or", "OR", "||" You can combine multiple different types of ematch. Here is an example:: match = [{"kind": "cmp", "layer": 2, "opnd": "eq", "align": "u32", "offset": 0, "value": 32, "relation": "&&"}, {"kind": "meta", "object":{"kind": "vlan_tag", "opnd": "eq"}, "value": 100, "relation": "||"}, {"kind": "ipset", "index": 0, "mode": "src", "inverse": True} ] � N)�htons)� protocols)�nla)�get_tca_action� tca_act_prio)�get_tcf_ematches�nla_plus_tcf_ematch_optc C s2 t |�dtj�d@ �|�dd�d> d@ B | d< d S )N�protocoli�� �prior � l � �info)r �getr Z ETH_P_ALL)�msg�kwarg� r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/pyroute2/netlink/rtnl/tcmsg/cls_basic.py�fix_msg� s ��r c C s� dg i}d}| � d�r,|d �dt| �g� | � d�rL|d �dt| �g� |D ].\}}| � |d �}|d urP|d �||g� qP|S )N�attrs))Zclassid�TCA_BASIC_CLASSID�match�TCA_BASIC_EMATCHES�action� TCA_BASIC_ACT)r �appendr r )r �retZ attrs_map�k�v�rr r r �get_parameters� s r c @ s$ e Zd ZdZG dd� de�ZeZdS )�options))ZTCA_BASIC_UNSPEC�none)r Zuint32)r �parse_basic_ematch_tree)r r )ZTCA_BASIC_POLICE�hexc @ s2 e Zd ZdZG dd� de�ZG dd� dee�ZdS )z options.parse_basic_ematch_tree))ZTCA_EMATCH_TREE_UNSPECr )ZTCA_EMATCH_TREE_HDR�tcf_parse_header)ZTCA_EMATCH_TREE_LISTz*tcf_parse_listc @ s e Zd ZdZdS )z0options.parse_basic_ematch_tree.tcf_parse_header))Znmatches�H)Zprogidr$ N)�__name__� __module__� __qualname__�fieldsr r r r r# � s r# c @ s e Zd ZdZdd� ZdS )z.options.parse_basic_ematch_tree.tcf_parse_list))Zmatchidr$ )�kindr$ )�flagsr$ )�padr$ )�opt�sc C st t �| � d}| j| j D ] }d|v r(q|t�|d �7 }q| j| }| j| j }| j||� }| � | |�| d< d S )Nr r, � ) r �decoder( �header�struct�calcsize�offset�length�dataZparse_ematch_options)�self�size�field�start�endr5 r r r r/ � s z5options.parse_basic_ematch_tree.tcf_parse_list.decodeN)r% r& r' r( r/ r r r r �tcf_parse_list� s r; N)r% r& r' �nla_mapr r# r r; r r r r r! � s r! N)r% r& r' r< r r! r r r r r r � s !r )�__doc__r1 �socketr Zpyroute2r Zpyroute2.netlinkr Z&pyroute2.netlink.rtnl.tcmsg.common_actr r Z)pyroute2.netlink.rtnl.tcmsg.common_ematchr r r r r r r r r �<module> s
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка