Allow users to specify raw bytes to match to processed packet, e.g.:
meta.bytes $OP $ANCHOR $OFFSET { 0xff, 0xff, 0xff }
would compare (according to $OP) 3 bytes against the packet's $ANCHOR + $OFFSET address.
With:
ANCHOR: base address/reference, it could be e.g. l3, l4
OFFSET: byte offset from ANCHOR
This is only a simple draft, but a more complete design should be proposed beforehand.
Allow users to specify raw bytes to match to processed packet, e.g.:
would compare (according to
$OP) 3 bytes against the packet's$ANCHOR + $OFFSETaddress.With:
ANCHOR: base address/reference, it could be e.g.l3,l4OFFSET: byte offset fromANCHORThis is only a simple draft, but a more complete design should be proposed beforehand.