2 * Copyright (c) 2011, 2012 Nicira, Inc.
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at:
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
19 #include "meta-flow.h"
24 #include <netinet/icmp6.h>
25 #include <netinet/ip6.h>
27 #include "classifier.h"
28 #include "dynamic-string.h"
29 #include "ofp-errors.h"
34 #include "socket-util.h"
35 #include "unaligned.h"
38 VLOG_DEFINE_THIS_MODULE(meta_flow
);
40 #define MF_FIELD_SIZES(MEMBER) \
41 sizeof ((union mf_value *)0)->MEMBER, \
42 8 * sizeof ((union mf_value *)0)->MEMBER
44 static const struct mf_field mf_fields
[MFF_N_IDS
] = {
50 MFF_TUN_ID
, "tun_id", NULL
,
56 NXM_NX_TUN_ID
, "NXM_NX_TUN_ID",
59 MFF_IN_PORT
, "in_port", NULL
,
61 MFM_NONE
, FWW_IN_PORT
,
65 NXM_OF_IN_PORT
, "NXM_OF_IN_PORT",
66 OXM_OF_IN_PORT
, "OXM_OF_IN_PORT",
69 #define REGISTER(IDX) \
71 MFF_REG##IDX, "reg" #IDX, NULL, \
72 MF_FIELD_SIZES(be32), \
114 MFF_ETH_SRC
, "eth_src", "dl_src",
120 NXM_OF_ETH_SRC
, "NXM_OF_ETH_SRC",
121 OXM_OF_ETH_SRC
, "OXM_OF_ETH_SRC",
123 MFF_ETH_DST
, "eth_dst", "dl_dst",
129 NXM_OF_ETH_DST
, "NXM_OF_ETH_DST",
130 OXM_OF_ETH_DST
, "OXM_OF_ETH_DST",
132 MFF_ETH_TYPE
, "eth_type", "dl_type",
133 MF_FIELD_SIZES(be16
),
134 MFM_NONE
, FWW_DL_TYPE
,
138 NXM_OF_ETH_TYPE
, "NXM_OF_ETH_TYPE",
139 OXM_OF_ETH_TYPE
, "OXM_OF_ETH_TYPE",
143 MFF_VLAN_TCI
, "vlan_tci", NULL
,
144 MF_FIELD_SIZES(be16
),
149 NXM_OF_VLAN_TCI
, "NXM_OF_VLAN_TCI",
152 MFF_VLAN_VID
, "dl_vlan", NULL
,
153 sizeof(ovs_be16
), 12,
159 OXM_OF_VLAN_VID
, "OXM_OF_VLAN_VID",
161 MFF_VLAN_PCP
, "dl_vlan_pcp", NULL
,
168 OXM_OF_VLAN_PCP
, "OXM_OF_VLAN_PCP",
176 MFF_IPV4_SRC
, "ip_src", "nw_src",
177 MF_FIELD_SIZES(be32
),
182 NXM_OF_IP_SRC
, "NXM_OF_IP_SRC",
183 OXM_OF_IPV4_SRC
, "OXM_OF_IPV4_SRC",
185 MFF_IPV4_DST
, "ip_dst", "nw_dst",
186 MF_FIELD_SIZES(be32
),
191 NXM_OF_IP_DST
, "NXM_OF_IP_DST",
192 OXM_OF_IPV4_DST
, "OXM_OF_IPV4_DST",
196 MFF_IPV6_SRC
, "ipv6_src", NULL
,
197 MF_FIELD_SIZES(ipv6
),
202 NXM_NX_IPV6_SRC
, "NXM_NX_IPV6_SRC",
203 OXM_OF_IPV6_SRC
, "OXM_OF_IPV6_SRC",
205 MFF_IPV6_DST
, "ipv6_dst", NULL
,
206 MF_FIELD_SIZES(ipv6
),
211 NXM_NX_IPV6_DST
, "NXM_NX_IPV6_DST",
212 OXM_OF_IPV6_DST
, "OXM_OF_IPV6_DST",
215 MFF_IPV6_LABEL
, "ipv6_label", NULL
,
217 MFM_NONE
, FWW_IPV6_LABEL
,
221 NXM_NX_IPV6_LABEL
, "NXM_NX_IPV6_LABEL",
222 OXM_OF_IPV6_FLABEL
, "OXM_OF_IPV6_FLABEL",
226 MFF_IP_PROTO
, "nw_proto", NULL
,
228 MFM_NONE
, FWW_NW_PROTO
,
232 NXM_OF_IP_PROTO
, "NXM_OF_IP_PROTO",
233 OXM_OF_IP_PROTO
, "OXM_OF_IP_PROTO",
235 MFF_IP_DSCP
, "nw_tos", NULL
,
237 MFM_NONE
, FWW_NW_DSCP
,
241 NXM_OF_IP_TOS
, "NXM_OF_IP_TOS",
242 OXM_OF_IP_DSCP
, "OXM_OF_IP_DSCP",
244 MFF_IP_ECN
, "nw_ecn", NULL
,
246 MFM_NONE
, FWW_NW_ECN
,
250 NXM_NX_IP_ECN
, "NXM_NX_IP_ECN",
251 OXM_OF_IP_ECN
, "OXM_OF_IP_ECN",
253 MFF_IP_TTL
, "nw_ttl", NULL
,
255 MFM_NONE
, FWW_NW_TTL
,
259 NXM_NX_IP_TTL
, "NXM_NX_IP_TTL",
262 MFF_IP_FRAG
, "ip_frag", NULL
,
268 NXM_NX_IP_FRAG
, "NXM_NX_IP_FRAG",
273 MFF_ARP_OP
, "arp_op", NULL
,
274 MF_FIELD_SIZES(be16
),
275 MFM_NONE
, FWW_NW_PROTO
,
279 NXM_OF_ARP_OP
, "NXM_OF_ARP_OP",
280 OXM_OF_ARP_OP
, "OXM_OF_ARP_OP",
282 MFF_ARP_SPA
, "arp_spa", NULL
,
283 MF_FIELD_SIZES(be32
),
288 NXM_OF_ARP_SPA
, "NXM_OF_ARP_SPA",
289 OXM_OF_ARP_SPA
, "OXM_OF_ARP_SPA",
291 MFF_ARP_TPA
, "arp_tpa", NULL
,
292 MF_FIELD_SIZES(be32
),
297 NXM_OF_ARP_TPA
, "NXM_OF_ARP_TPA",
298 OXM_OF_ARP_TPA
, "OXM_OF_ARP_TPA",
300 MFF_ARP_SHA
, "arp_sha", NULL
,
302 MFM_NONE
, FWW_ARP_SHA
,
306 NXM_NX_ARP_SHA
, "NXM_NX_ARP_SHA",
307 OXM_OF_ARP_SHA
, "OXM_OF_ARP_SHA",
309 MFF_ARP_THA
, "arp_tha", NULL
,
311 MFM_NONE
, FWW_ARP_THA
,
315 NXM_NX_ARP_THA
, "NXM_NX_ARP_THA",
316 OXM_OF_ARP_THA
, "OXM_OF_ARP_THA",
324 MFF_TCP_SRC
, "tcp_src", "tp_src",
325 MF_FIELD_SIZES(be16
),
330 NXM_OF_TCP_SRC
, "NXM_OF_TCP_SRC",
331 OXM_OF_TCP_SRC
, "OXM_OF_TCP_SRC",
333 MFF_TCP_DST
, "tcp_dst", "tp_dst",
334 MF_FIELD_SIZES(be16
),
339 NXM_OF_TCP_DST
, "NXM_OF_TCP_DST",
340 OXM_OF_TCP_DST
, "OXM_OF_TCP_DST",
344 MFF_UDP_SRC
, "udp_src", NULL
,
345 MF_FIELD_SIZES(be16
),
350 NXM_OF_UDP_SRC
, "NXM_OF_UDP_SRC",
351 OXM_OF_UDP_SRC
, "OXM_OF_UDP_SRC",
353 MFF_UDP_DST
, "udp_dst", NULL
,
354 MF_FIELD_SIZES(be16
),
359 NXM_OF_UDP_DST
, "NXM_OF_UDP_DST",
360 OXM_OF_UDP_DST
, "OXM_OF_UDP_DST",
364 MFF_ICMPV4_TYPE
, "icmp_type", NULL
,
370 NXM_OF_ICMP_TYPE
, "NXM_OF_ICMP_TYPE",
371 OXM_OF_ICMPV4_TYPE
, "OXM_OF_ICMPV4_TYPE",
373 MFF_ICMPV4_CODE
, "icmp_code", NULL
,
379 NXM_OF_ICMP_CODE
, "NXM_OF_ICMP_CODE",
380 OXM_OF_ICMPV4_CODE
, "OXM_OF_ICMPV4_CODE",
384 MFF_ICMPV6_TYPE
, "icmpv6_type", NULL
,
390 NXM_NX_ICMPV6_TYPE
, "NXM_NX_ICMPV6_TYPE",
391 OXM_OF_ICMPV6_TYPE
, "OXM_OF_ICMPV6_TYPE",
393 MFF_ICMPV6_CODE
, "icmpv6_code", NULL
,
399 NXM_NX_ICMPV6_CODE
, "NXM_NX_ICMPV6_CODE",
400 OXM_OF_ICMPV6_CODE
, "OXM_OF_ICMPV6_CODE",
408 MFF_ND_TARGET
, "nd_target", NULL
,
409 MF_FIELD_SIZES(ipv6
),
414 NXM_NX_ND_TARGET
, "NXM_NX_ND_TARGET",
415 OXM_OF_IPV6_ND_TARGET
, "OXM_OF_IPV6_ND_TARGET",
417 MFF_ND_SLL
, "nd_sll", NULL
,
419 MFM_NONE
, FWW_ARP_SHA
,
423 NXM_NX_ND_SLL
, "NXM_NX_ND_SLL",
424 OXM_OF_IPV6_ND_SLL
, "OXM_OF_IPV6_ND_SLL",
426 MFF_ND_TLL
, "nd_tll", NULL
,
428 MFM_NONE
, FWW_ARP_THA
,
432 NXM_NX_ND_TLL
, "NXM_NX_ND_TLL",
433 OXM_OF_IPV6_ND_TLL
, "OXM_OF_IPV6_ND_TLL",
438 struct hmap_node hmap_node
;
440 const struct mf_field
*mf
;
443 static struct hmap all_nxm_fields
= HMAP_INITIALIZER(&all_nxm_fields
);
444 static struct hmap all_oxm_fields
= HMAP_INITIALIZER(&all_oxm_fields
);
446 /* Rate limit for parse errors. These always indicate a bug in an OpenFlow
447 * controller and so there's not much point in showing a lot of them. */
448 static struct vlog_rate_limit rl
= VLOG_RATE_LIMIT_INIT(1, 5);
450 /* Returns the field with the given 'id'. */
451 const struct mf_field
*
452 mf_from_id(enum mf_field_id id
)
454 assert((unsigned int) id
< MFF_N_IDS
);
455 return &mf_fields
[id
];
458 /* Returns the field with the given 'name', or a null pointer if no field has
460 const struct mf_field
*
461 mf_from_name(const char *name
)
463 static struct shash mf_by_name
= SHASH_INITIALIZER(&mf_by_name
);
465 if (shash_is_empty(&mf_by_name
)) {
466 const struct mf_field
*mf
;
468 for (mf
= mf_fields
; mf
< &mf_fields
[MFF_N_IDS
]; mf
++) {
469 shash_add_once(&mf_by_name
, mf
->name
, mf
);
470 if (mf
->extra_name
) {
471 shash_add_once(&mf_by_name
, mf
->extra_name
, mf
);
476 return shash_find_data(&mf_by_name
, name
);
480 add_nxm_field(struct hmap
*all_fields
, uint32_t nxm_header
,
481 const struct mf_field
*mf
)
485 f
= xmalloc(sizeof *f
);
486 hmap_insert(all_fields
, &f
->hmap_node
, hash_int(nxm_header
, 0));
487 f
->nxm_header
= nxm_header
;
492 get_all_fields(uint32_t header
)
494 return IS_OXM_HEADER(header
) ? &all_oxm_fields
: &all_nxm_fields
;
498 nxm_init_add_field(const struct mf_field
*mf
, uint32_t header
)
500 struct hmap
*all_fields
= get_all_fields(header
);
505 add_nxm_field(all_fields
, header
, mf
);
506 if (mf
->maskable
== MFM_NONE
) {
509 add_nxm_field(all_fields
, NXM_MAKE_WILD_HEADER(header
), mf
);
514 nxm_init_verify_field(const struct mf_field
*mf
, uint32_t header
)
519 assert(mf_from_nxm_header(header
) == mf
);
520 /* Some OXM fields are not maskable while their NXM
521 * counterparts are, just skip this check for now */
522 if (mf
->maskable
== MFM_NONE
|| IS_OXM_HEADER(header
)) {
525 assert(mf_from_nxm_header(NXM_MAKE_WILD_HEADER(mf
->nxm_header
)) == mf
);
532 const struct mf_field
*mf
;
534 for (mf
= mf_fields
; mf
< &mf_fields
[MFF_N_IDS
]; mf
++) {
535 nxm_init_add_field(mf
, mf
->nxm_header
);
536 nxm_init_add_field(mf
, mf
->oxm_header
);
540 /* Verify that the header values are unique. */
541 for (mf
= mf_fields
; mf
< &mf_fields
[MFF_N_IDS
]; mf
++) {
542 nxm_init_verify_field(mf
, mf
->nxm_header
);
543 nxm_init_verify_field(mf
, mf
->oxm_header
);
548 const struct mf_field
*
549 mf_from_nxm_header(uint32_t header
)
551 const struct nxm_field
*f
;
552 struct hmap
*all_fields
= get_all_fields(header
);
554 if (hmap_is_empty(all_fields
)) {
558 HMAP_FOR_EACH_IN_BUCKET (f
, hmap_node
, hash_int(header
, 0), all_fields
) {
559 if (f
->nxm_header
== header
) {
567 /* Returns true if 'wc' wildcards all the bits in field 'mf', false if 'wc'
568 * specifies at least one bit in the field.
570 * The caller is responsible for ensuring that 'wc' corresponds to a flow that
571 * meets 'mf''s prerequisites. */
573 mf_is_all_wild(const struct mf_field
*mf
, const struct flow_wildcards
*wc
)
588 assert(mf
->fww_bit
!= 0);
589 return (wc
->wildcards
& mf
->fww_bit
) != 0;
592 return !wc
->tun_id_mask
;
621 return !wc
->reg_masks
[mf
->id
- MFF_REG0
];
624 return eth_addr_is_zero(wc
->dl_src_mask
);
626 return eth_addr_is_zero(wc
->dl_dst_mask
);
629 return !wc
->vlan_tci_mask
;
631 return !(wc
->vlan_tci_mask
& htons(VLAN_VID_MASK
));
633 return !(wc
->vlan_tci_mask
& htons(VLAN_PCP_MASK
));
636 return !wc
->nw_src_mask
;
638 return !wc
->nw_dst_mask
;
641 return ipv6_mask_is_any(&wc
->ipv6_src_mask
);
643 return ipv6_mask_is_any(&wc
->ipv6_dst_mask
);
646 return ipv6_mask_is_any(&wc
->nd_target_mask
);
649 return !(wc
->nw_frag_mask
& FLOW_NW_FRAG_MASK
);
652 return !wc
->nw_src_mask
;
654 return !wc
->nw_dst_mask
;
658 case MFF_ICMPV4_TYPE
:
659 case MFF_ICMPV6_TYPE
:
660 return !wc
->tp_src_mask
;
663 case MFF_ICMPV4_CODE
:
664 case MFF_ICMPV6_CODE
:
665 return !wc
->tp_dst_mask
;
673 /* Initializes 'mask' with the wildcard bit pattern for field 'mf' within 'wc'.
674 * Each bit in 'mask' will be set to 1 if the bit is significant for matching
675 * purposes, or to 0 if it is wildcarded.
677 * The caller is responsible for ensuring that 'wc' corresponds to a flow that
678 * meets 'mf''s prerequisites. */
680 mf_get_mask(const struct mf_field
*mf
, const struct flow_wildcards
*wc
,
681 union mf_value
*mask
)
696 assert(mf
->fww_bit
!= 0);
697 memset(mask
, wc
->wildcards
& mf
->fww_bit
? 0x00 : 0xff, mf
->n_bytes
);
701 mask
->be64
= wc
->tun_id_mask
;
731 mask
->be32
= htonl(wc
->reg_masks
[mf
->id
- MFF_REG0
]);
735 memcpy(mask
->mac
, wc
->dl_dst_mask
, ETH_ADDR_LEN
);
739 memcpy(mask
->mac
, wc
->dl_src_mask
, ETH_ADDR_LEN
);
743 mask
->be16
= wc
->vlan_tci_mask
;
746 mask
->be16
= wc
->vlan_tci_mask
& htons(VLAN_VID_MASK
);
749 mask
->u8
= vlan_tci_to_pcp(wc
->vlan_tci_mask
);
753 mask
->be32
= wc
->nw_src_mask
;
756 mask
->be32
= wc
->nw_dst_mask
;
760 mask
->ipv6
= wc
->ipv6_src_mask
;
763 mask
->ipv6
= wc
->ipv6_dst_mask
;
767 mask
->ipv6
= wc
->nd_target_mask
;
771 mask
->u8
= wc
->nw_frag_mask
& FLOW_NW_FRAG_MASK
;
775 mask
->be32
= wc
->nw_src_mask
;
778 mask
->be32
= wc
->nw_dst_mask
;
783 mask
->be16
= wc
->tp_src_mask
;
787 mask
->be16
= wc
->tp_dst_mask
;
790 case MFF_ICMPV4_TYPE
:
791 case MFF_ICMPV6_TYPE
:
792 mask
->u8
= ntohs(wc
->tp_src_mask
);
794 case MFF_ICMPV4_CODE
:
795 case MFF_ICMPV6_CODE
:
796 mask
->u8
= ntohs(wc
->tp_dst_mask
);
805 /* Tests whether 'mask' is a valid wildcard bit pattern for 'mf'. Returns true
806 * if the mask is valid, false otherwise. */
808 mf_is_mask_valid(const struct mf_field
*mf
, const union mf_value
*mask
)
810 switch (mf
->maskable
) {
812 return (is_all_zeros((const uint8_t *) mask
, mf
->n_bytes
) ||
813 is_all_ones((const uint8_t *) mask
, mf
->n_bytes
));
819 return (mf
->n_bytes
== 4
820 ? ip_is_cidr(mask
->be32
)
821 : ipv6_is_cidr(&mask
->ipv6
));
828 is_ip_any(const struct flow
*flow
)
830 return (flow
->dl_type
== htons(ETH_TYPE_IP
) ||
831 flow
->dl_type
== htons(ETH_TYPE_IPV6
));
835 is_icmpv4(const struct flow
*flow
)
837 return (flow
->dl_type
== htons(ETH_TYPE_IP
)
838 && flow
->nw_proto
== IPPROTO_ICMP
);
842 is_icmpv6(const struct flow
*flow
)
844 return (flow
->dl_type
== htons(ETH_TYPE_IPV6
)
845 && flow
->nw_proto
== IPPROTO_ICMPV6
);
848 /* Returns true if 'flow' meets the prerequisites for 'mf', false otherwise. */
850 mf_are_prereqs_ok(const struct mf_field
*mf
, const struct flow
*flow
)
852 switch (mf
->prereqs
) {
857 return flow
->dl_type
== htons(ETH_TYPE_ARP
);
859 return flow
->dl_type
== htons(ETH_TYPE_IP
);
861 return flow
->dl_type
== htons(ETH_TYPE_IPV6
);
863 return is_ip_any(flow
);
866 return is_ip_any(flow
) && flow
->nw_proto
== IPPROTO_TCP
;
868 return is_ip_any(flow
) && flow
->nw_proto
== IPPROTO_UDP
;
870 return is_icmpv4(flow
);
872 return is_icmpv6(flow
);
875 return (is_icmpv6(flow
)
876 && flow
->tp_dst
== htons(0)
877 && (flow
->tp_src
== htons(ND_NEIGHBOR_SOLICIT
) ||
878 flow
->tp_src
== htons(ND_NEIGHBOR_ADVERT
)));
880 return (is_icmpv6(flow
)
881 && flow
->tp_dst
== htons(0)
882 && (flow
->tp_src
== htons(ND_NEIGHBOR_SOLICIT
)));
884 return (is_icmpv6(flow
)
885 && flow
->tp_dst
== htons(0)
886 && (flow
->tp_src
== htons(ND_NEIGHBOR_ADVERT
)));
892 /* Returns true if 'value' may be a valid value *as part of a masked match*,
895 * A value is not rejected just because it is not valid for the field in
896 * question, but only if it doesn't make sense to test the bits in question at
897 * all. For example, the MFF_VLAN_TCI field will never have a nonzero value
898 * without the VLAN_CFI bit being set, but we can't reject those values because
899 * it is still legitimate to test just for those bits (see the documentation
900 * for NXM_OF_VLAN_TCI in nicira-ext.h). On the other hand, there is never a
901 * reason to set the low bit of MFF_IP_DSCP to 1, so we reject that. */
903 mf_is_value_valid(const struct mf_field
*mf
, const union mf_value
*value
)
953 case MFF_ICMPV4_TYPE
:
954 case MFF_ICMPV4_CODE
:
955 case MFF_ICMPV6_TYPE
:
956 case MFF_ICMPV6_CODE
:
963 return !(value
->u8
& ~IP_DSCP_MASK
);
965 return !(value
->u8
& ~IP_ECN_MASK
);
967 return !(value
->u8
& ~FLOW_NW_FRAG_MASK
);
970 return !(value
->be16
& htons(0xff00));
973 return !(value
->be16
& htons(VLAN_CFI
| VLAN_PCP_MASK
));
976 return !(value
->u8
& ~7);
979 return !(value
->be32
& ~htonl(IPV6_LABEL_MASK
));
987 /* Copies the value of field 'mf' from 'flow' into 'value'. The caller is
988 * responsible for ensuring that 'flow' meets 'mf''s prerequisites. */
990 mf_get_value(const struct mf_field
*mf
, const struct flow
*flow
,
991 union mf_value
*value
)
995 value
->be64
= flow
->tun_id
;
999 value
->be16
= htons(flow
->in_port
);
1029 value
->be32
= htonl(flow
->regs
[mf
->id
- MFF_REG0
]);
1033 memcpy(value
->mac
, flow
->dl_src
, ETH_ADDR_LEN
);
1037 memcpy(value
->mac
, flow
->dl_dst
, ETH_ADDR_LEN
);
1041 value
->be16
= flow
->dl_type
;
1045 value
->be16
= flow
->vlan_tci
;
1049 value
->be16
= flow
->vlan_tci
& htons(VLAN_VID_MASK
);
1053 value
->u8
= vlan_tci_to_pcp(flow
->vlan_tci
);
1057 value
->be32
= flow
->nw_src
;
1061 value
->be32
= flow
->nw_dst
;
1065 value
->ipv6
= flow
->ipv6_src
;
1069 value
->ipv6
= flow
->ipv6_dst
;
1072 case MFF_IPV6_LABEL
:
1073 value
->be32
= flow
->ipv6_label
;
1077 value
->u8
= flow
->nw_proto
;
1081 value
->u8
= flow
->nw_tos
& IP_DSCP_MASK
;
1085 value
->u8
= flow
->nw_tos
& IP_ECN_MASK
;
1089 value
->u8
= flow
->nw_ttl
;
1093 value
->u8
= flow
->nw_frag
;
1097 value
->be16
= htons(flow
->nw_proto
);
1101 value
->be32
= flow
->nw_src
;
1105 value
->be32
= flow
->nw_dst
;
1110 memcpy(value
->mac
, flow
->arp_sha
, ETH_ADDR_LEN
);
1115 memcpy(value
->mac
, flow
->arp_tha
, ETH_ADDR_LEN
);
1119 value
->be16
= flow
->tp_src
;
1123 value
->be16
= flow
->tp_dst
;
1127 value
->be16
= flow
->tp_src
;
1131 value
->be16
= flow
->tp_dst
;
1134 case MFF_ICMPV4_TYPE
:
1135 case MFF_ICMPV6_TYPE
:
1136 value
->u8
= ntohs(flow
->tp_src
);
1139 case MFF_ICMPV4_CODE
:
1140 case MFF_ICMPV6_CODE
:
1141 value
->u8
= ntohs(flow
->tp_dst
);
1145 value
->ipv6
= flow
->nd_target
;
1154 /* Makes 'rule' match field 'mf' exactly, with the value matched taken from
1155 * 'value'. The caller is responsible for ensuring that 'rule' meets 'mf''s
1158 mf_set_value(const struct mf_field
*mf
,
1159 const union mf_value
*value
, struct cls_rule
*rule
)
1163 cls_rule_set_tun_id(rule
, value
->be64
);
1167 cls_rule_set_in_port(rule
, ntohs(value
->be16
));
1198 cls_rule_set_reg(rule
, mf
->id
- MFF_REG0
, ntohl(value
->be32
));
1203 cls_rule_set_dl_src(rule
, value
->mac
);
1207 cls_rule_set_dl_dst(rule
, value
->mac
);
1211 cls_rule_set_dl_type(rule
, value
->be16
);
1215 cls_rule_set_dl_tci(rule
, value
->be16
);
1219 cls_rule_set_dl_vlan(rule
, value
->be16
);
1223 cls_rule_set_dl_vlan_pcp(rule
, value
->u8
);
1227 cls_rule_set_nw_src(rule
, value
->be32
);
1231 cls_rule_set_nw_dst(rule
, value
->be32
);
1235 cls_rule_set_ipv6_src(rule
, &value
->ipv6
);
1239 cls_rule_set_ipv6_dst(rule
, &value
->ipv6
);
1242 case MFF_IPV6_LABEL
:
1243 cls_rule_set_ipv6_label(rule
, value
->be32
);
1247 cls_rule_set_nw_proto(rule
, value
->u8
);
1251 cls_rule_set_nw_dscp(rule
, value
->u8
);
1255 cls_rule_set_nw_ecn(rule
, value
->u8
);
1259 cls_rule_set_nw_ttl(rule
, value
->u8
);
1263 cls_rule_set_nw_frag(rule
, value
->u8
);
1267 cls_rule_set_nw_proto(rule
, ntohs(value
->be16
));
1271 cls_rule_set_nw_src(rule
, value
->be32
);
1275 cls_rule_set_nw_dst(rule
, value
->be32
);
1280 cls_rule_set_arp_sha(rule
, value
->mac
);
1285 cls_rule_set_arp_tha(rule
, value
->mac
);
1289 cls_rule_set_tp_src(rule
, value
->be16
);
1293 cls_rule_set_tp_dst(rule
, value
->be16
);
1297 cls_rule_set_tp_src(rule
, value
->be16
);
1301 cls_rule_set_tp_dst(rule
, value
->be16
);
1304 case MFF_ICMPV4_TYPE
:
1305 case MFF_ICMPV6_TYPE
:
1306 cls_rule_set_icmp_type(rule
, value
->u8
);
1309 case MFF_ICMPV4_CODE
:
1310 case MFF_ICMPV6_CODE
:
1311 cls_rule_set_icmp_code(rule
, value
->u8
);
1315 cls_rule_set_nd_target(rule
, &value
->ipv6
);
1324 /* Makes 'rule' match field 'mf' exactly, with the value matched taken from
1325 * 'value'. The caller is responsible for ensuring that 'rule' meets 'mf''s
1328 mf_set_flow_value(const struct mf_field
*mf
,
1329 const union mf_value
*value
, struct flow
*flow
)
1333 flow
->tun_id
= value
->be64
;
1337 flow
->in_port
= ntohs(value
->be16
);
1368 flow
->regs
[mf
->id
- MFF_REG0
] = ntohl(value
->be32
);
1373 memcpy(flow
->dl_src
, value
->mac
, ETH_ADDR_LEN
);
1377 memcpy(flow
->dl_dst
, value
->mac
, ETH_ADDR_LEN
);
1381 flow
->dl_type
= value
->be16
;
1385 flow
->vlan_tci
= value
->be16
;
1389 flow_set_vlan_vid(flow
, value
->be16
);
1393 flow_set_vlan_pcp(flow
, value
->u8
);
1397 flow
->nw_src
= value
->be32
;
1401 flow
->nw_dst
= value
->be32
;
1405 flow
->ipv6_src
= value
->ipv6
;
1409 flow
->ipv6_dst
= value
->ipv6
;
1412 case MFF_IPV6_LABEL
:
1413 flow
->ipv6_label
= value
->be32
& ~htonl(IPV6_LABEL_MASK
);
1417 flow
->nw_proto
= value
->u8
;
1421 flow
->nw_tos
&= ~IP_DSCP_MASK
;
1422 flow
->nw_tos
|= value
->u8
& IP_DSCP_MASK
;
1426 flow
->nw_tos
&= ~IP_ECN_MASK
;
1427 flow
->nw_tos
|= value
->u8
& IP_ECN_MASK
;
1431 flow
->nw_ttl
= value
->u8
;
1435 flow
->nw_frag
&= value
->u8
;
1439 flow
->nw_proto
= ntohs(value
->be16
);
1443 flow
->nw_src
= value
->be32
;
1447 flow
->nw_dst
= value
->be32
;
1452 memcpy(flow
->arp_sha
, value
->mac
, ETH_ADDR_LEN
);
1457 memcpy(flow
->arp_tha
, value
->mac
, ETH_ADDR_LEN
);
1462 flow
->tp_src
= value
->be16
;
1467 flow
->tp_dst
= value
->be16
;
1470 case MFF_ICMPV4_TYPE
:
1471 case MFF_ICMPV6_TYPE
:
1472 flow
->tp_src
= htons(value
->u8
);
1475 case MFF_ICMPV4_CODE
:
1476 case MFF_ICMPV6_CODE
:
1477 flow
->tp_dst
= htons(value
->u8
);
1481 flow
->nd_target
= value
->ipv6
;
1490 /* Returns true if 'mf' has a zero value in 'flow', false if it is nonzero.
1492 * The caller is responsible for ensuring that 'flow' meets 'mf''s
1495 mf_is_zero(const struct mf_field
*mf
, const struct flow
*flow
)
1497 union mf_value value
;
1499 mf_get_value(mf
, flow
, &value
);
1500 return is_all_zeros((const uint8_t *) &value
, mf
->n_bytes
);
1503 /* Makes 'rule' wildcard field 'mf'.
1505 * The caller is responsible for ensuring that 'rule' meets 'mf''s
1508 mf_set_wild(const struct mf_field
*mf
, struct cls_rule
*rule
)
1512 cls_rule_set_tun_id_masked(rule
, htonll(0), htonll(0));
1516 rule
->wc
.wildcards
|= FWW_IN_PORT
;
1517 rule
->flow
.in_port
= 0;
1522 cls_rule_set_reg_masked(rule
, 0, 0, 0);
1527 cls_rule_set_reg_masked(rule
, 1, 0, 0);
1532 cls_rule_set_reg_masked(rule
, 2, 0, 0);
1537 cls_rule_set_reg_masked(rule
, 3, 0, 0);
1542 cls_rule_set_reg_masked(rule
, 4, 0, 0);
1547 cls_rule_set_reg_masked(rule
, 5, 0, 0);
1552 cls_rule_set_reg_masked(rule
, 6, 0, 0);
1557 cls_rule_set_reg_masked(rule
, 7, 0, 0);
1565 memset(rule
->flow
.dl_src
, 0, ETH_ADDR_LEN
);
1566 memset(rule
->wc
.dl_src_mask
, 0, ETH_ADDR_LEN
);
1570 memset(rule
->flow
.dl_dst
, 0, ETH_ADDR_LEN
);
1571 memset(rule
->wc
.dl_dst_mask
, 0, ETH_ADDR_LEN
);
1575 rule
->wc
.wildcards
|= FWW_DL_TYPE
;
1576 rule
->flow
.dl_type
= htons(0);
1580 cls_rule_set_dl_tci_masked(rule
, htons(0), htons(0));
1584 cls_rule_set_any_vid(rule
);
1588 cls_rule_set_any_pcp(rule
);
1593 cls_rule_set_nw_src_masked(rule
, htonl(0), htonl(0));
1598 cls_rule_set_nw_dst_masked(rule
, htonl(0), htonl(0));
1602 memset(&rule
->wc
.ipv6_src_mask
, 0, sizeof rule
->wc
.ipv6_src_mask
);
1603 memset(&rule
->flow
.ipv6_src
, 0, sizeof rule
->flow
.ipv6_src
);
1607 memset(&rule
->wc
.ipv6_dst_mask
, 0, sizeof rule
->wc
.ipv6_dst_mask
);
1608 memset(&rule
->flow
.ipv6_dst
, 0, sizeof rule
->flow
.ipv6_dst
);
1611 case MFF_IPV6_LABEL
:
1612 rule
->wc
.wildcards
|= FWW_IPV6_LABEL
;
1613 rule
->flow
.ipv6_label
= 0;
1617 rule
->wc
.wildcards
|= FWW_NW_PROTO
;
1618 rule
->flow
.nw_proto
= 0;
1622 rule
->wc
.wildcards
|= FWW_NW_DSCP
;
1623 rule
->flow
.nw_tos
&= ~IP_DSCP_MASK
;
1627 rule
->wc
.wildcards
|= FWW_NW_ECN
;
1628 rule
->flow
.nw_tos
&= ~IP_ECN_MASK
;
1632 rule
->wc
.wildcards
|= FWW_NW_TTL
;
1633 rule
->flow
.nw_ttl
= 0;
1637 rule
->wc
.nw_frag_mask
|= FLOW_NW_FRAG_MASK
;
1638 rule
->flow
.nw_frag
&= ~FLOW_NW_FRAG_MASK
;
1642 rule
->wc
.wildcards
|= FWW_NW_PROTO
;
1643 rule
->flow
.nw_proto
= 0;
1648 rule
->wc
.wildcards
|= FWW_ARP_SHA
;
1649 memset(rule
->flow
.arp_sha
, 0, sizeof rule
->flow
.arp_sha
);
1654 rule
->wc
.wildcards
|= FWW_ARP_THA
;
1655 memset(rule
->flow
.arp_tha
, 0, sizeof rule
->flow
.arp_tha
);
1660 case MFF_ICMPV4_TYPE
:
1661 case MFF_ICMPV6_TYPE
:
1662 rule
->wc
.tp_src_mask
= htons(0);
1663 rule
->flow
.tp_src
= htons(0);
1668 case MFF_ICMPV4_CODE
:
1669 case MFF_ICMPV6_CODE
:
1670 rule
->wc
.tp_dst_mask
= htons(0);
1671 rule
->flow
.tp_dst
= htons(0);
1675 memset(&rule
->wc
.nd_target_mask
, 0, sizeof rule
->wc
.nd_target_mask
);
1676 memset(&rule
->flow
.nd_target
, 0, sizeof rule
->flow
.nd_target
);
1685 /* Makes 'rule' match field 'mf' with the specified 'value' and 'mask'.
1686 * 'value' specifies a value to match and 'mask' specifies a wildcard pattern,
1687 * with a 1-bit indicating that the corresponding value bit must match and a
1688 * 0-bit indicating a don't-care.
1690 * If 'mask' is NULL or points to all-1-bits, then this call is equivalent to
1691 * mf_set_value(mf, value, rule). If 'mask' points to all-0-bits, then this
1692 * call is equivalent to mf_set_wild(mf, rule).
1694 * 'mask' must be a valid mask for 'mf' (see mf_is_mask_valid()). The caller
1695 * is responsible for ensuring that 'rule' meets 'mf''s prerequisites. */
1697 mf_set(const struct mf_field
*mf
,
1698 const union mf_value
*value
, const union mf_value
*mask
,
1699 struct cls_rule
*rule
)
1701 if (!mask
|| is_all_ones((const uint8_t *) mask
, mf
->n_bytes
)) {
1702 mf_set_value(mf
, value
, rule
);
1704 } else if (is_all_zeros((const uint8_t *) mask
, mf
->n_bytes
)) {
1705 mf_set_wild(mf
, rule
);
1714 case MFF_IPV6_LABEL
:
1722 case MFF_ICMPV4_TYPE
:
1723 case MFF_ICMPV4_CODE
:
1724 case MFF_ICMPV6_TYPE
:
1725 case MFF_ICMPV6_CODE
:
1731 cls_rule_set_tun_id_masked(rule
, value
->be64
, mask
->be64
);
1761 cls_rule_set_reg_masked(rule
, mf
->id
- MFF_REG0
,
1762 ntohl(value
->be32
), ntohl(mask
->be32
));
1766 cls_rule_set_dl_dst_masked(rule
, value
->mac
, mask
->mac
);
1770 cls_rule_set_dl_src_masked(rule
, value
->mac
, mask
->mac
);
1774 cls_rule_set_dl_tci_masked(rule
, value
->be16
, mask
->be16
);
1778 cls_rule_set_nw_src_masked(rule
, value
->be32
, mask
->be32
);
1782 cls_rule_set_nw_dst_masked(rule
, value
->be32
, mask
->be32
);
1786 cls_rule_set_ipv6_src_masked(rule
, &value
->ipv6
, &mask
->ipv6
);
1790 cls_rule_set_ipv6_dst_masked(rule
, &value
->ipv6
, &mask
->ipv6
);
1794 cls_rule_set_nd_target_masked(rule
, &value
->ipv6
, &mask
->ipv6
);
1798 cls_rule_set_nw_frag_masked(rule
, value
->u8
, mask
->u8
);
1802 cls_rule_set_nw_src_masked(rule
, value
->be32
, mask
->be32
);
1806 cls_rule_set_nw_dst_masked(rule
, value
->be32
, mask
->be32
);
1811 cls_rule_set_tp_src_masked(rule
, value
->be16
, mask
->be16
);
1816 cls_rule_set_tp_dst_masked(rule
, value
->be16
, mask
->be16
);
1826 mf_check__(const struct mf_subfield
*sf
, const struct flow
*flow
,
1830 VLOG_WARN_RL(&rl
, "unknown %s field", type
);
1831 } else if (!sf
->n_bits
) {
1832 VLOG_WARN_RL(&rl
, "zero bit %s field %s", type
, sf
->field
->name
);
1833 } else if (sf
->ofs
>= sf
->field
->n_bits
) {
1834 VLOG_WARN_RL(&rl
, "bit offset %d exceeds %d-bit width of %s field %s",
1835 sf
->ofs
, sf
->field
->n_bits
, type
, sf
->field
->name
);
1836 } else if (sf
->ofs
+ sf
->n_bits
> sf
->field
->n_bits
) {
1837 VLOG_WARN_RL(&rl
, "bit offset %d and width %d exceeds %d-bit width "
1838 "of %s field %s", sf
->ofs
, sf
->n_bits
,
1839 sf
->field
->n_bits
, type
, sf
->field
->name
);
1840 } else if (flow
&& !mf_are_prereqs_ok(sf
->field
, flow
)) {
1841 VLOG_WARN_RL(&rl
, "%s field %s lacks correct prerequisites",
1842 type
, sf
->field
->name
);
1847 return OFPERR_OFPBAC_BAD_ARGUMENT
;
1850 /* Checks whether 'sf' is valid for reading a subfield out of 'flow'. Returns
1851 * 0 if so, otherwise an OpenFlow error code (e.g. as returned by
1854 mf_check_src(const struct mf_subfield
*sf
, const struct flow
*flow
)
1856 return mf_check__(sf
, flow
, "source");
1859 /* Checks whether 'sf' is valid for writing a subfield into 'flow'. Returns 0
1860 * if so, otherwise an OpenFlow error code (e.g. as returned by
1863 mf_check_dst(const struct mf_subfield
*sf
, const struct flow
*flow
)
1865 int error
= mf_check__(sf
, flow
, "destination");
1866 if (!error
&& !sf
->field
->writable
) {
1867 VLOG_WARN_RL(&rl
, "destination field %s is not writable",
1869 return OFPERR_OFPBAC_BAD_ARGUMENT
;
1874 /* Copies the value and wildcard bit pattern for 'mf' from 'rule' into the
1875 * 'value' and 'mask', respectively. */
1877 mf_get(const struct mf_field
*mf
, const struct cls_rule
*rule
,
1878 union mf_value
*value
, union mf_value
*mask
)
1880 mf_get_value(mf
, &rule
->flow
, value
);
1881 mf_get_mask(mf
, &rule
->wc
, mask
);
1884 /* Assigns a random value for field 'mf' to 'value'. */
1886 mf_random_value(const struct mf_field
*mf
, union mf_value
*value
)
1888 random_bytes(value
, mf
->n_bytes
);
1938 case MFF_ICMPV4_TYPE
:
1939 case MFF_ICMPV4_CODE
:
1940 case MFF_ICMPV6_TYPE
:
1941 case MFF_ICMPV6_CODE
:
1947 case MFF_IPV6_LABEL
:
1948 value
->be32
&= ~htonl(IPV6_LABEL_MASK
);
1952 value
->u8
&= IP_DSCP_MASK
;
1956 value
->u8
&= IP_ECN_MASK
;
1960 value
->u8
&= FLOW_NW_FRAG_MASK
;
1964 value
->be16
&= htons(0xff);
1968 value
->be16
&= htons(VLAN_VID_MASK
);
1982 mf_from_integer_string(const struct mf_field
*mf
, const char *s
,
1983 uint8_t *valuep
, uint8_t *maskp
)
1985 unsigned long long int integer
, mask
;
1990 integer
= strtoull(s
, &tail
, 0);
1991 if (errno
|| (*tail
!= '\0' && *tail
!= '/')) {
1996 mask
= strtoull(tail
+ 1, &tail
, 0);
1997 if (errno
|| *tail
!= '\0') {
2004 for (i
= mf
->n_bytes
- 1; i
>= 0; i
--) {
2005 valuep
[i
] = integer
;
2011 return xasprintf("%s: value too large for %u-byte field %s",
2012 s
, mf
->n_bytes
, mf
->name
);
2017 return xasprintf("%s: bad syntax for %s", s
, mf
->name
);
2021 mf_from_ethernet_string(const struct mf_field
*mf
, const char *s
,
2022 uint8_t mac
[ETH_ADDR_LEN
],
2023 uint8_t mask
[ETH_ADDR_LEN
])
2025 assert(mf
->n_bytes
== ETH_ADDR_LEN
);
2027 switch (sscanf(s
, ETH_ADDR_SCAN_FMT
"/"ETH_ADDR_SCAN_FMT
,
2028 ETH_ADDR_SCAN_ARGS(mac
), ETH_ADDR_SCAN_ARGS(mask
))){
2029 case ETH_ADDR_SCAN_COUNT
* 2:
2032 case ETH_ADDR_SCAN_COUNT
:
2033 memset(mask
, 0xff, ETH_ADDR_LEN
);
2037 return xasprintf("%s: invalid Ethernet address", s
);
2042 mf_from_ipv4_string(const struct mf_field
*mf
, const char *s
,
2043 ovs_be32
*ip
, ovs_be32
*mask
)
2047 assert(mf
->n_bytes
== sizeof *ip
);
2049 if (sscanf(s
, IP_SCAN_FMT
"/"IP_SCAN_FMT
,
2050 IP_SCAN_ARGS(ip
), IP_SCAN_ARGS(mask
)) == IP_SCAN_COUNT
* 2) {
2052 } else if (sscanf(s
, IP_SCAN_FMT
"/%d",
2053 IP_SCAN_ARGS(ip
), &prefix
) == IP_SCAN_COUNT
+ 1) {
2054 if (prefix
<= 0 || prefix
> 32) {
2055 return xasprintf("%s: network prefix bits not between 1 and "
2057 } else if (prefix
== 32) {
2058 *mask
= htonl(UINT32_MAX
);
2060 *mask
= htonl(((1u << prefix
) - 1) << (32 - prefix
));
2062 } else if (sscanf(s
, IP_SCAN_FMT
, IP_SCAN_ARGS(ip
)) == IP_SCAN_COUNT
) {
2063 *mask
= htonl(UINT32_MAX
);
2065 return xasprintf("%s: invalid IP address", s
);
2071 mf_from_ipv6_string(const struct mf_field
*mf
, const char *s
,
2072 struct in6_addr
*value
, struct in6_addr
*mask
)
2074 char *str
= xstrdup(s
);
2075 char *save_ptr
= NULL
;
2076 const char *name
, *netmask
;
2079 assert(mf
->n_bytes
== sizeof *value
);
2081 name
= strtok_r(str
, "/", &save_ptr
);
2082 retval
= name
? lookup_ipv6(name
, value
) : EINVAL
;
2086 err
= xasprintf("%s: could not convert to IPv6 address", str
);
2092 netmask
= strtok_r(NULL
, "/", &save_ptr
);
2094 int prefix
= atoi(netmask
);
2095 if (prefix
<= 0 || prefix
> 128) {
2097 return xasprintf("%s: prefix bits not between 1 and 128", s
);
2099 *mask
= ipv6_create_mask(prefix
);
2102 *mask
= in6addr_exact
;
2110 mf_from_ofp_port_string(const struct mf_field
*mf
, const char *s
,
2111 ovs_be16
*valuep
, ovs_be16
*maskp
)
2115 assert(mf
->n_bytes
== sizeof(ovs_be16
));
2116 if (ofputil_port_from_string(s
, &port
)) {
2117 *valuep
= htons(port
);
2118 *maskp
= htons(UINT16_MAX
);
2121 return mf_from_integer_string(mf
, s
,
2122 (uint8_t *) valuep
, (uint8_t *) maskp
);
2126 struct frag_handling
{
2132 static const struct frag_handling all_frags
[] = {
2133 #define A FLOW_NW_FRAG_ANY
2134 #define L FLOW_NW_FRAG_LATER
2135 /* name mask value */
2138 { "first", A
|L
, A
},
2139 { "later", A
|L
, A
|L
},
2144 { "not_later", L
, 0 },
2151 mf_from_frag_string(const char *s
, uint8_t *valuep
, uint8_t *maskp
)
2153 const struct frag_handling
*h
;
2155 for (h
= all_frags
; h
< &all_frags
[ARRAY_SIZE(all_frags
)]; h
++) {
2156 if (!strcasecmp(s
, h
->name
)) {
2157 /* We force the upper bits of the mask on to make mf_parse_value()
2158 * happy (otherwise it will never think it's an exact match.) */
2159 *maskp
= h
->mask
| ~FLOW_NW_FRAG_MASK
;
2165 return xasprintf("%s: unknown fragment type (valid types are \"no\", "
2166 "\"yes\", \"first\", \"later\", \"not_first\"", s
);
2169 /* Parses 's', a string value for field 'mf', into 'value' and 'mask'. Returns
2170 * NULL if successful, otherwise a malloc()'d string describing the error. */
2172 mf_parse(const struct mf_field
*mf
, const char *s
,
2173 union mf_value
*value
, union mf_value
*mask
)
2175 if (!strcasecmp(s
, "any") || !strcmp(s
, "*")) {
2176 memset(value
, 0, mf
->n_bytes
);
2177 memset(mask
, 0, mf
->n_bytes
);
2181 switch (mf
->string
) {
2183 case MFS_HEXADECIMAL
:
2184 return mf_from_integer_string(mf
, s
,
2185 (uint8_t *) value
, (uint8_t *) mask
);
2188 return mf_from_ethernet_string(mf
, s
, value
->mac
, mask
->mac
);
2191 return mf_from_ipv4_string(mf
, s
, &value
->be32
, &mask
->be32
);
2194 return mf_from_ipv6_string(mf
, s
, &value
->ipv6
, &mask
->ipv6
);
2197 return mf_from_ofp_port_string(mf
, s
, &value
->be16
, &mask
->be16
);
2200 return mf_from_frag_string(s
, &value
->u8
, &mask
->u8
);
2205 /* Parses 's', a string value for field 'mf', into 'value'. Returns NULL if
2206 * successful, otherwise a malloc()'d string describing the error. */
2208 mf_parse_value(const struct mf_field
*mf
, const char *s
, union mf_value
*value
)
2210 union mf_value mask
;
2213 error
= mf_parse(mf
, s
, value
, &mask
);
2218 if (!is_all_ones((const uint8_t *) &mask
, mf
->n_bytes
)) {
2219 return xasprintf("%s: wildcards not allowed here", s
);
2225 mf_format_integer_string(const struct mf_field
*mf
, const uint8_t *valuep
,
2226 const uint8_t *maskp
, struct ds
*s
)
2228 unsigned long long int integer
;
2231 assert(mf
->n_bytes
<= 8);
2234 for (i
= 0; i
< mf
->n_bytes
; i
++) {
2235 integer
= (integer
<< 8) | valuep
[i
];
2237 if (mf
->string
== MFS_HEXADECIMAL
) {
2238 ds_put_format(s
, "%#llx", integer
);
2240 ds_put_format(s
, "%lld", integer
);
2244 unsigned long long int mask
;
2247 for (i
= 0; i
< mf
->n_bytes
; i
++) {
2248 mask
= (mask
<< 8) | maskp
[i
];
2251 /* I guess we could write the mask in decimal for MFS_DECIMAL but I'm
2252 * not sure that that a bit-mask written in decimal is ever easier to
2253 * understand than the same bit-mask written in hexadecimal. */
2254 ds_put_format(s
, "/%#llx", mask
);
2259 mf_format_frag_string(const uint8_t *valuep
, const uint8_t *maskp
,
2262 const struct frag_handling
*h
;
2263 uint8_t value
= *valuep
;
2264 uint8_t mask
= *maskp
;
2267 mask
&= FLOW_NW_FRAG_MASK
;
2269 for (h
= all_frags
; h
< &all_frags
[ARRAY_SIZE(all_frags
)]; h
++) {
2270 if (value
== h
->value
&& mask
== h
->mask
) {
2271 ds_put_cstr(s
, h
->name
);
2275 ds_put_cstr(s
, "<error>");
2278 /* Appends to 's' a string representation of field 'mf' whose value is in
2279 * 'value' and 'mask'. 'mask' may be NULL to indicate an exact match. */
2281 mf_format(const struct mf_field
*mf
,
2282 const union mf_value
*value
, const union mf_value
*mask
,
2286 if (is_all_zeros((const uint8_t *) mask
, mf
->n_bytes
)) {
2287 ds_put_cstr(s
, "ANY");
2289 } else if (is_all_ones((const uint8_t *) mask
, mf
->n_bytes
)) {
2294 switch (mf
->string
) {
2297 ofputil_format_port(ntohs(value
->be16
), s
);
2302 case MFS_HEXADECIMAL
:
2303 mf_format_integer_string(mf
, (uint8_t *) value
, (uint8_t *) mask
, s
);
2307 eth_format_masked(value
->mac
, mask
->mac
, s
);
2311 ip_format_masked(value
->be32
, mask
? mask
->be32
: htonl(UINT32_MAX
),
2316 print_ipv6_masked(s
, &value
->ipv6
, mask
? &mask
->ipv6
: NULL
);
2320 mf_format_frag_string(&value
->u8
, &mask
->u8
, s
);
2328 /* Makes subfield 'sf' within 'rule' exactly match the 'sf->n_bits'
2329 * least-significant bits in 'x'.
2331 * See mf_set_subfield() for an example.
2333 * The difference between this function and mf_set_subfield() is that the
2334 * latter function can only handle subfields up to 64 bits wide, whereas this
2335 * one handles the general case. On the other hand, mf_set_subfield() is
2336 * arguably easier to use. */
2338 mf_write_subfield(const struct mf_subfield
*sf
, const union mf_subvalue
*x
,
2339 struct cls_rule
*rule
)
2341 const struct mf_field
*field
= sf
->field
;
2342 union mf_value value
, mask
;
2344 mf_get(field
, rule
, &value
, &mask
);
2345 bitwise_copy(x
, sizeof *x
, 0, &value
, field
->n_bytes
, sf
->ofs
, sf
->n_bits
);
2346 bitwise_one ( &mask
, field
->n_bytes
, sf
->ofs
, sf
->n_bits
);
2347 mf_set(field
, &value
, &mask
, rule
);
2350 /* Makes subfield 'sf' within 'rule' exactly match the 'sf->n_bits'
2351 * least-significant bits of 'x'.
2353 * Example: suppose that 'sf->field' is originally the following 2-byte field
2356 * value == 0xe00a == 2#1110000000001010
2357 * mask == 0xfc3f == 2#1111110000111111
2359 * The call mf_set_subfield(sf, 0x55, 8, 7, rule), where sf->ofs == 8 and
2360 * sf->n_bits == 7 would have the following effect (note that 0x55 is
2363 * value == 0xd50a == 2#1101010100001010
2364 * mask == 0xff3f == 2#1111111100111111
2365 * ^^^^^^^ affected bits
2367 * The caller is responsible for ensuring that the result will be a valid
2368 * wildcard pattern for 'sf->field'. The caller is responsible for ensuring
2369 * that 'rule' meets 'sf->field''s prerequisites. */
2371 mf_set_subfield(const struct mf_subfield
*sf
, uint64_t x
,
2372 struct cls_rule
*rule
)
2374 const struct mf_field
*field
= sf
->field
;
2375 unsigned int n_bits
= sf
->n_bits
;
2376 unsigned int ofs
= sf
->ofs
;
2378 if (ofs
== 0 && field
->n_bytes
* 8 == n_bits
) {
2379 union mf_value value
;
2382 for (i
= field
->n_bytes
- 1; i
>= 0; i
--) {
2383 ((uint8_t *) &value
)[i
] = x
;
2386 mf_set_value(field
, &value
, rule
);
2388 union mf_value value
, mask
;
2389 uint8_t *vp
= (uint8_t *) &value
;
2390 uint8_t *mp
= (uint8_t *) &mask
;
2392 mf_get(field
, rule
, &value
, &mask
);
2393 bitwise_put(x
, vp
, field
->n_bytes
, ofs
, n_bits
);
2394 bitwise_put(UINT64_MAX
, mp
, field
->n_bytes
, ofs
, n_bits
);
2395 mf_set(field
, &value
, &mask
, rule
);
2399 /* Similar to mf_set_subfield() but modifies only a flow, not a cls_rule. */
2401 mf_set_subfield_value(const struct mf_subfield
*sf
, uint64_t x
,
2404 const struct mf_field
*field
= sf
->field
;
2405 unsigned int n_bits
= sf
->n_bits
;
2406 unsigned int ofs
= sf
->ofs
;
2407 union mf_value value
;
2409 if (ofs
== 0 && field
->n_bytes
* 8 == n_bits
) {
2412 for (i
= field
->n_bytes
- 1; i
>= 0; i
--) {
2413 ((uint8_t *) &value
)[i
] = x
;
2416 mf_set_flow_value(field
, &value
, flow
);
2418 mf_get_value(field
, flow
, &value
);
2419 bitwise_put(x
, &value
, field
->n_bytes
, ofs
, n_bits
);
2420 mf_set_flow_value(field
, &value
, flow
);
2424 /* Initializes 'x' to the value of 'sf' within 'flow'. 'sf' must be valid for
2425 * reading 'flow', e.g. as checked by mf_check_src(). */
2427 mf_read_subfield(const struct mf_subfield
*sf
, const struct flow
*flow
,
2428 union mf_subvalue
*x
)
2430 union mf_value value
;
2432 mf_get_value(sf
->field
, flow
, &value
);
2434 memset(x
, 0, sizeof *x
);
2435 bitwise_copy(&value
, sf
->field
->n_bytes
, sf
->ofs
,
2440 /* Returns the value of 'sf' within 'flow'. 'sf' must be valid for reading
2441 * 'flow', e.g. as checked by mf_check_src() and sf->n_bits must be 64 or
2444 mf_get_subfield(const struct mf_subfield
*sf
, const struct flow
*flow
)
2446 union mf_value value
;
2448 mf_get_value(sf
->field
, flow
, &value
);
2449 return bitwise_get(&value
, sf
->field
->n_bytes
, sf
->ofs
, sf
->n_bits
);
2452 /* Formats 'sf' into 's' in a format normally acceptable to
2453 * mf_parse_subfield(). (It won't be acceptable if sf->field is NULL or if
2454 * sf->field has no NXM name.) */
2456 mf_format_subfield(const struct mf_subfield
*sf
, struct ds
*s
)
2459 ds_put_cstr(s
, "<unknown>");
2460 } else if (sf
->field
->nxm_name
) {
2461 ds_put_cstr(s
, sf
->field
->nxm_name
);
2462 } else if (sf
->field
->nxm_header
) {
2463 uint32_t header
= sf
->field
->nxm_header
;
2464 ds_put_format(s
, "%d:%d", NXM_VENDOR(header
), NXM_FIELD(header
));
2466 ds_put_cstr(s
, sf
->field
->name
);
2469 if (sf
->field
&& sf
->ofs
== 0 && sf
->n_bits
== sf
->field
->n_bits
) {
2470 ds_put_cstr(s
, "[]");
2471 } else if (sf
->n_bits
== 1) {
2472 ds_put_format(s
, "[%d]", sf
->ofs
);
2474 ds_put_format(s
, "[%d..%d]", sf
->ofs
, sf
->ofs
+ sf
->n_bits
- 1);
2478 static const struct mf_field
*
2479 mf_parse_subfield_name(const char *name
, int name_len
, bool *wild
)
2483 *wild
= name_len
> 2 && !memcmp(&name
[name_len
- 2], "_W", 2);
2488 for (i
= 0; i
< MFF_N_IDS
; i
++) {
2489 const struct mf_field
*mf
= mf_from_id(i
);
2492 && !strncmp(mf
->nxm_name
, name
, name_len
)
2493 && mf
->nxm_name
[name_len
] == '\0') {
2501 /* Parses a subfield from the beginning of '*sp' into 'sf'. If successful,
2502 * returns NULL and advances '*sp' to the first byte following the parsed
2503 * string. On failure, returns a malloc()'d error message, does not modify
2504 * '*sp', and does not properly initialize 'sf'.
2506 * The syntax parsed from '*sp' takes the form "header[start..end]" where
2507 * 'header' is the name of an NXM field and 'start' and 'end' are (inclusive)
2508 * bit indexes. "..end" may be omitted to indicate a single bit. "start..end"
2509 * may both be omitted (the [] are still required) to indicate an entire
2512 mf_parse_subfield__(struct mf_subfield
*sf
, const char **sp
)
2514 const struct mf_field
*field
;
2523 name_len
= strcspn(s
, "[");
2524 if (s
[name_len
] != '[') {
2525 return xasprintf("%s: missing [ looking for field name", *sp
);
2528 field
= mf_parse_subfield_name(name
, name_len
, &wild
);
2530 return xasprintf("%s: unknown field `%.*s'", *sp
, name_len
, s
);
2534 if (sscanf(s
, "[%d..%d]", &start
, &end
) == 2) {
2535 /* Nothing to do. */
2536 } else if (sscanf(s
, "[%d]", &start
) == 1) {
2538 } else if (!strncmp(s
, "[]", 2)) {
2540 end
= field
->n_bits
- 1;
2542 return xasprintf("%s: syntax error expecting [] or [<bit>] or "
2543 "[<start>..<end>]", *sp
);
2545 s
= strchr(s
, ']') + 1;
2548 return xasprintf("%s: starting bit %d is after ending bit %d",
2550 } else if (start
>= field
->n_bits
) {
2551 return xasprintf("%s: starting bit %d is not valid because field is "
2552 "only %d bits wide", *sp
, start
, field
->n_bits
);
2553 } else if (end
>= field
->n_bits
){
2554 return xasprintf("%s: ending bit %d is not valid because field is "
2555 "only %d bits wide", *sp
, end
, field
->n_bits
);
2560 sf
->n_bits
= end
- start
+ 1;
2566 /* Parses a subfield from the beginning of 's' into 'sf'. Returns the first
2567 * byte in 's' following the parsed string.
2569 * Exits with an error message if 's' has incorrect syntax.
2571 * The syntax parsed from 's' takes the form "header[start..end]" where
2572 * 'header' is the name of an NXM field and 'start' and 'end' are (inclusive)
2573 * bit indexes. "..end" may be omitted to indicate a single bit. "start..end"
2574 * may both be omitted (the [] are still required) to indicate an entire
2577 mf_parse_subfield(struct mf_subfield
*sf
, const char *s
)
2579 char *msg
= mf_parse_subfield__(sf
, &s
);
2581 ovs_fatal(0, "%s", msg
);