nftables-devel-0.9.8-150300.3.3.1 >  A b{_p9|3w.<˘2ug# `S\ϣ^k A=E`N#(mp,o|`a0/kc\##fC_G3uDsuy1Lk$O#?jwӡz AMK1.*;HqU;˄74TzX,v̷]%QG /bǾa{M8|+2^ G[ʩ4uVh[=7AцQ/W06Ģ|w߂sx30e32da35b4ce472f801b75380bc1e11834b8122fbe88f5a5c31610da8195e3ec7b66b7d08560cc4206ad82f39d0d0e900e86d78Bb{_p9|ɝ+W)Pȩbf&|ƑsqVݼ4x`%9p[LQPp>&?&d $ ^2? Uu      (Ld@(c8l9:RF"G"H"I"X"Y#\#,]#D^#b$c$d%;e%@f%Cl%Eu%Xv%pw&x&(y&@z&H&X&\&b&Cnftables-devel0.9.8150300.3.3.1Development files for the nftables command line interfacelibnftables is the nftables command line interface placed into a library. This package contains the header files for the library.b{_YsangiovesePSUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Libraries/C and C++https://netfilter.org/projects/nftables/linuxppc64le 6AA큤b{_Wb{_Wb{_Wb{_Vb{_Wb{_W326da31e471a394fc3bcabed2678284caad2a06e0631db51aad4bbe1c66452e6193e9f84b975fa8c908af297bf45403737f6f12702ad0eacd7edc0fe92d01276585a01a0e39c1685e655bf4945b6a06f4cd9904af71612b74f9d8abe738f7062libnftables.so.1.0.0rootrootrootrootrootrootrootrootrootrootrootrootnftables-0.9.8-150300.3.3.1.src.rpmnftables-develnftables-devel(ppc-64)pkgconfig(libnftables)@    /usr/bin/pkg-configlibnftables1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.9.83.0.4-14.6.0-14.0-15.2-14.14.3bo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching.sangiovese 16522525050.9.8-150300.3.3.10.9.8-150300.3.3.10.9.8nftablesnftableslibnftables.hlibnftables.solibnftables.pclibnftables.3.gz/usr/include//usr/include/nftables//usr/include/nftables/nftables//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24179/SUSE_SLE-15-SP3_Update/66ac1bca1b33139dd80ec031930f1675-nftables.SUSE_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)PRM„+Rߚ utf-8369057b520c527c9298aa0c506d3950807265e68cb194b72c281d5f6745d8904? 7zXZ !t/!K] crt:bLL %l2Aձz(ފ9- S:%E Lvx> ?Kzbl"W.^mEu ,h!GX 1\BmaCC'lUH b7ōkVl[3y%{gr_Bؗ.=1Ni#logx+@⎃N_}j3b7y& (t#"!jph8 ܊FsDŊxteYe40ep˓oe0s2~98umb;:^ݓZ_7G<BM'F/0 ㌶&ɸ:X r R6~ְ=Ү^w:F!4qY_}Pְ?ʖ.dsʥFWcb7 Q򻏱wgVǸUQ䳁|"BXo|~4pzZcw 1kFf7Z0m7trJe첾"-:ZCaV^29n2Moh" AC*Sݣ?oEc8#eW+R*lD[Ww[L׸'sK>;B>xLS 6E5[:jIeh;f1 VwY+è$榬s:V V2&"v۱CJU})SǨl6\4)RJ(\E% kNr*%`F#L|k]y <@ҍC*ߌWk` 'Jc%uǠ.@/1x!8,aX,\w4(֓B8O ;O|y@@bI\B2QT:`pJn~膰<.9l5h>?~M~˿֞J!$zpy^` 3 []w6^ڜwCr$K#螏Ĭ8L6fx ڋZ$%S T3^f9 qJ4o=/oB pĠ7~[ScQz/+Tȩ='pFiհhīҮWUO&A5Kv*[6 E"F‘GN̮ j :8^_;[w3_\hʶDbiuUͭd9L9<e2JLP"Wq{9>6As='z'aϜmnR%4 \abD3;ŠwEmG 7UoGDȭե/vkl$A:WUtrgC,#0oƮE6tNTl:wp!d%z(F)IS]e]e$7 adI=fUU%݁ >6M&Q,d5(=Žn94`\T.y|cr9jQ:~"ȱD3Ix3fw5p#HZnwAY[BĜ材]*pHܘ"ޓ@ XeЃ.Z=;JS-1b`fߠ$=5 ?r"6"/Xgj@>P5rxvu錨3?PG>&)QdK`mLڢksI݊̎o9K/>:ַ;M | [rnY)6 L)x5h]ʯ'o(>j3xCxG/~w,1)ȧ~fgnA`ƣ:ڒ_\QWH d{=0N!4sY"AXpO<TJIfya<ʽI>Y=Am<ņ$d}M(+}&B1$(, GN0Ra*0ljjQ^I#I^T Mz%ڃ_~"/i}*/BVlN*VZU"E*҂ %yC|X؊ٟ*O+1RkvFPȴ,r;PQ2$ K Csf9k^G(-d.VZMp%0Y%*(#~ȴvfz%aaVruMk5էYEK!S$Th+=dbq]5E"22y@/4yX^mB(P͆E#NxPMLe)anq=f'e cϲJpͩ(3>dM@cUz]v˛[L 0ra+d9 p2C&pw\ W҆Bӆ^LwmA,dWI fxzB'sh)=9Xр"i?cT/x:O1$p"h&mPRPJ:QUeήɃ.ټ1 0Yku֧̘gҏB'B`oKϨ c򦜎-[M=Ҍ]!<GXIRu g`DX!Ȁ47-> }=A4bsL[+6Qr&ИSJxRT c9`G =lqi`̥)r-0qk(X7G[=YGC _hb^R -+yJoc0պ jbR[Z-G]jpvjwº74Axn"0ɸqg3S=P~ &B]|߬˱@8v)q-3$ɯcY{g?sriagz~.~M8}Zc.&(_p0>(M00*~%/s;R9c41)áuL+rZ{|N&NziT'[>.Q[!j]?!@6e9~vNyx%l ڥDΠpswCes!CyM?ZЏzs4*Kk.vLHSΠ)8=^[m~c4oƃhقǪ}*,2\="ѳ-|G~p!s].dUJcѧuO ؚ.f*xРA_0[1hXKٚ?zeGq@(?1W^. MDьC }l8{N:߭kZIhs)jȗElDt}dy~&H"mf25uRuն$AǞBDvCx > 5e^@uݞ 2Fwkm2FGz.T[a޵{0~9`~\%bEIw,0 MbP^H7 q^,UI'ph0( [h&U,C0,IZgJvQB}sԠE7܎! b'KydT:ymvx{?f NҊ!{=S=$51j_B>e h*ĔQj_p+! i&/dƞ[NNMx6oy]3NـX*ŋegbH>ߑ5\<;W gڢ kEߟ5EW,oͅ1"xP߄Yq;*E1 I)(Q[u:P2J_-wV+ztPյ "0a.y޶aHʶxs@yԿ0_y[VVŏ*|0.O̔[C@Pb!0Cj)9 d' 8dtv3)^Yns0I@w#q5+7/&۝w$zVA/^[[Gm> rc*tB; ?Sv@ ҽΫ+ 99@:AJFv.SR7?U (4ˑ