"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "go/testdata/concurrency.t" between
Netspoc-6.025.tar.gz and Netspoc-6.026.tar.gz

About: NetSPoC is a network security policy compiler (using its own description language) to manage all the packet filter devices inside your network topology.

concurrency.t  (Netspoc-6.025):concurrency.t  (Netspoc-6.026)
############################################################ ############################################################
=TITLE=Pass 1
=INPUT=
network:n1 = { ip = 10.1.1.0/24; host:h1 = { ip = 10.1.1.10; } }
network:n2 = { ip = 10.1.2.0/24; }
router:asa1 = {
managed;
model = ASA;
interface:n1 = { ip = 10.1.1.1; hardware = n1; }
interface:n2 = { ip = 10.1.2.1; hardware = n2; }
}
service:s1 = {
user = host:h1;
permit src = user; dst = network:n2; prt = tcp 22;
}
=END=
# No errors expected.
=OUTPUT=
! n1_in
access-list n1_in extended permit tcp host 10.1.1.10 10.1.2.0 255.255.255.0 eq 2
2
access-list n1_in extended deny ip any4 any4
access-group n1_in in interface n1
=END=
=OPTIONS=--concurrency_pass1=2
############################################################
=TITLE=Warning from background job
=VAR=input
network:n1 = { ip = 10.1.1.0/24; }
network:n2 = { ip = 10.1.2.0/24; }
router:asa1 = {
managed;
model = ASA;
interface:n1 = { ip = 10.1.1.1; hardware = n1; }
interface:n2 = { ip = 10.1.2.1; hardware = n2; }
}
service:s1 = {
user = network:n1;
permit src = user; dst = network:n2; prt = tcp 80;
}
service:s2 = {
user = network:n1;
permit src = user; dst = network:n2; prt = ip;
}
=END=
=INPUT=${input}
# Output is indented
=WARNING=
Warning: Redundant rules in service:s1 compared to service:s2:
permit src=network:n1; dst=network:n2; prt=tcp 80; of service:s1
< permit src=network:n1; dst=network:n2; prt=ip; of service:s2
=END=
=OPTIONS=--concurrency_pass1=2
############################################################
=TITLE=Error from background job
=OPTIONS=--concurrency_pass1=2 --check_redundant_rules=err
=INPUT=${input}
=ERROR=
Error: Redundant rules in service:s1 compared to service:s2:
permit src=network:n1; dst=network:n2; prt=tcp 80; of service:s1
< permit src=network:n1; dst=network:n2; prt=ip; of service:s2
=END=
############################################################
=TITLE=Abort from background job
=OPTIONS=--max_errors=1 --concurrency_pass1=2 --check_redundant_rules=err
=INPUT=${input}
=ERROR=
Error: Redundant rules in service:s1 compared to service:s2:
permit src=network:n1; dst=network:n2; prt=tcp 80; of service:s1
< permit src=network:n1; dst=network:n2; prt=ip; of service:s2
Aborted after 1 errors
=END=
############################################################
=TITLE=Abort in foreground job
# Don't wait for background job, but exit immediately.
=INPUT=
network:n1 = { ip = 10.1.1.0/24; }
network:sub = { ip = 10.1.1.8/29; }
router:r1 = {
interface:n1;
interface:sub;
}
=END=
=ERROR=
Error: network:sub is subnet of network:n1
in nat_domain:[network:n1].
If desired, declare attribute 'subnet_of'
Aborted after 1 errors
=END=
=OPTIONS=--max_errors=1 --check_subnets=err --concurrency_pass1=2
############################################################
=TITLE=Pass 2: 3 devices with up to 8 jobs =TITLE=Pass 2: 3 devices with up to 8 jobs
=VAR=input =VAR=input
network:n1 = { ip = 10.1.1.0/24; } network:n1 = { ip = 10.1.1.0/24; }
router:asa1 = { router:asa1 = {
managed; managed;
model = ASA; model = ASA;
interface:n1 = { ip = 10.1.1.1; hardware = n1; } interface:n1 = { ip = 10.1.1.1; hardware = n1; }
} }
router:asa2 = { router:asa2 = {
managed; managed;
skipping to change at line 136 skipping to change at line 41
access-group n1_in in interface n1 access-group n1_in in interface n1
-- asa3 -- asa3
! n1_in ! n1_in
access-list n1_in extended deny ip any4 any4 access-list n1_in extended deny ip any4 any4
access-group n1_in in interface n1 access-group n1_in in interface n1
=END= =END=
=INPUT=${input} =INPUT=${input}
=OUTPUT= =OUTPUT=
${output} ${output}
=OPTIONS=--concurrency_pass2=8 =OPTIONS=--concurrency_pass2=8
############################################################
=TITLE=Pass 2: 3 devices with 2 jobs
=INPUT=${input}
=OUTPUT=
${output}
=OPTIONS=--concurrency_pass2=2
############################################################
 End of changes. 2 change blocks. 
95 lines changed or deleted 0 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)