[LARTC] port masks in tcng

[LARTC] port masks in tcng

[lartc]

hi all,

hopefully a simple question:

i would like to have a range of ports from 3200 to 3299, so i did the
standard calculation

65535 - ( 3299 - 3200 ) = 65436 = 0xff9c

what is the syntax for a hex mask in tcng?

for the moment, i have

<snip>
 
    (<$high>) if tcp_dport = 3200:7;

<snip>

which gives me a wee bit too much

thanks!

cheers

charles



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[LARTC] port masks in tcng

[Jacob Teplitsky]

Hi  Charles,
1. tcp_dport = 3200:7   is wrong
  Use tcp_dport:7 = 3200

2. To see bit manipulation in tcng:

/usr/lib/tcng/include/

fields4.tc:field tcp_SYN = (tcp_hdr[13].b >> 1) & 1; /* SYN */
idiomatic.tc:field ip_tos_throughput = (ip_tos >> 3) & 1;

- Jacob

Message: 7
From: "lartc@manchotnetworks.net" <lartc@manchotnetworks.net>
To: LARTC list <lartc@mailman.ds9a.nl>
Date: Tue, 02 Dec 2003 18:36:13 +0100
Subject: [LARTC] port masks in tcng

hi all,

hopefully a simple question:

i would like to have a range of ports from 3200 to 3299, so i did the
standard calculation

65535 - ( 3299 - 3200 ) = 65436 = 0xff9c

what is the syntax for a hex mask in tcng?

for the moment, i have

<snip>
 
    (<$high>) if tcp_dport = 3200:7;

<snip>

which gives me a wee bit too much

thanks!

cheers

charles


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/