Re: [RFC PATCH nft userspace] nft: connlabel matching support

[Patrick McHardy <kaber@trash.net>]

On Sun, Feb 16, 2014 at 05:53:33PM +0000, Patrick McHardy wrote:
> On 16. Februar 2014 17:51:32 GMT+00:00, Florian Westphal <fw@strlen.de> wrote:
> >> > As a side note, experimenting a bit with tcp flags:
> >> > 
> >> > add rule filter output tcp flags & (syn|ack) == (syn|ack)
> >> > 
> >> > works fine with current master branch.  But list shows
> >> > 
> >> > "tcp flags & 18 == 18", i.e. no symbol translation.
> >> > 
> >> > Shouldn't it restore the symbolic names?
> >> > I think this is the very same problem that I had with my connlabel
> >> > dabbling, so it would be nice if it could be solved in generic way.
> >> 
> >> Most likely. Please see if the attached patch solves this.
> >
> >No:
> >add rule filter output tcp flags & (syn|ack) == (syn|ack)
> >list table filter
> >tcp flags & 18 == 18
> >
> >The expression works.
> 
> I'll look into it in about an hour.

It requires a bit more work. I'm half way through, but if this is holding
you up, I'd suggest to just proceed as if it were working already.