libnftables1-0.9.8-150300.3.3.1<>,X|b{_pp9||9bo>Z1rM^,SwB%x,.Ƴ_>@'d?'Td " I ;AHP T X `  <(89:>#@$F$G$(H$0I$8X$<Y$H\$p]$x^$b$c%Sd%e%f%l%u%v%w&x&y&z&''''PClibnftables10.9.8150300.3.3.1nftables firewalling command interfacelibnftables is the nftables command line interface placed into a library.b{_psheep25 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Librarieshttps://netfilter.org/projects/nftables/linuxx86_64 b{_mb{_nc4866568bc4fed3361f3d8290635a9364a4c8abac0732098fba2ae3e626bc902libnftables.so.1.0.0rootrootrootrootnftables-0.9.8-150300.3.3.1.src.rpmlibnftables.so.1()(64bit)libnftables1libnftables1(x86-64)@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.22)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libgmp.so.10()(64bit)libjansson.so.4()(64bit)libmnl.so.0()(64bit)libmnl.so.0(LIBMNL_1.0)(64bit)libnftnl.so.11()(64bit)libnftnl.so.11(LIBNFTNL_11)(64bit)libnftnl.so.11(LIBNFTNL_13)(64bit)libnftnl.so.11(LIBNFTNL_14)(64bit)libnftnl.so.11(LIBNFTNL_15)(64bit)libnftnl.so.11(LIBNFTNL_16)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching./sbin/ldconfig/sbin/ldconfigsheep25 16522525280.9.8-150300.3.3.10.9.8-150300.3.3.1libnftables.so.1libnftables.so.1.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24179/SUSE_SLE-15-SP3_Update/66ac1bca1b33139dd80ec031930f1675-nftables.SUSE_SLE-15-SP3_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f222c20dbd68b45556cfa2571d9de6fb3468b77, strippedPRRRR RR RR RR RRRRRRRRRR Rwc}utf-851b7dc2d3f0e669de7e413ac56ad7d2e2482e7ef19ccde92e1fb60471c0bf6b1?7zXZ !t/?,]"k%f0]dZaȗ2v=ZB T#Ixr&HdЖamdjB"-])>w9 WiMBőX[,Lpޙ J "mK*w3mʫn_7wrf{Ұ.K kpDl/RyHg'Bilγ>uQ&9%!l8mfQR ^N4HNL_̰ďPl+!o: u%m;еdqc\\G'jt5Mq 8 |҃=,֕R`|NB` k+ͦ8q~U+:0bun1ס/Q#acRsWx"ieG8}[9ifKxXۭԼi1]$w.zt7r*ñ -%x{kvh@3K{<yiBm]٤.^74hIC63o_12zGkYQC5`ͦkc{˸^}^EѲ{݅G ;t3e֏rb-Jf@s\#6n']-T{uĭJ82On倶^_KK]UK0ۦf_B22G/t ;\uN"wXTCtrGa4B'[cXWwV+[f\WZ e]nTyEh@ʰvhe0RM3w o6xb <=^3 5TT2+q6}c`̷xY 4]Z'Ai(4Vy?B'YHV_)KZz">)"ն̉@vDƝȾkN @6謑v{LPI6&ĆJ[AYfg"o`S0-rvûǐ'GW,>/خBb0Bo?p~[%o/fj~6&$&j TDJwUƶM.˺ p̐R/.'KwwL=\q*$]Ղww~J6K;nDn߽h{0ԍ/Ϣ?v\oPmîϾaL"Tq1[k`ʹu 2Wh%UZP ZǾVԧ Kލ'i]{#Zf܅M&Np^I;, s!XF&9@0aH.pɓ KyR0Vغ,Z6#= qu+q~ڠazΟ`;f'@.(bik`2\_L7)!,Wʽ*;-Q-2S=Up*KZڗ1: T@%c ; *)?O< =*ZRD.q ӛo&[dGy^ I@lhW`5^Wqrdr}l6l9}>.)=qJ1x [㖮|EW3J,`۫ޝûmHG^zHPگP=ᵫjCɂ-!sGiQ[r}|5#R0ny`;-yx(K|ҨkXj~-G'3AAŐD\(b V lǃjКf,`1b2j$?YQ< *tFw=%M|g\y*_rԏewrs._0!{Rh4s ٨}Xr[Tr( f>%hD)} ɾ.*V赼(rR4Ua(.ڭ}%尶oQ }׃DnP?dw$4vCf z!bQ$W C`\j 9Q |GPt*aA"[ӕ-P'PXeaF\-SVEV$l]%dEܗM[>9x{f 3F!Lє6?(8g{U"Or3.K %}cb(L^K_Dh}x-cz= 01 |QRk߮=ҡ$s$@P\@U#+nڛh_|uU^ԭWɱ- ﷠d^&a ^(|j(\>[ܞr%bۘjdQv4Lu^\4͝HHoVg[)0uEPyf-24P. ׉ q,00x nC oJl5 U-◊~C~FY@E m;/cGzIQ]+ּFkϢޘs9mVIY -GP~e GD7$ptw<3[T8t0N.jo"8Ubq39•#DPDGDZ0dDԳnfY'Qbϕ 6嬣Is m=' eݵc⑔H|nbNa{ Vx/tLO.p2ԲټtH7HC˚*.ǁQn/@Z.TFZȃ>]b [KLHj{ktͿE3uՒrECLu-UQ˶.Am!@ j\,Ԛac F 6 <7-k\Qz4cm%K= ^^2nˈ#  `f8 $[+9N'm.MhXPЂI KuΩ-*()J^7#\Ւ~h!M^%R׉Ub) *K>_sªY\ɖ0r͙wÔ`=#F$AZ7g3YVUazP,$yh۝$Ϩ9kKik%8otgW- TǑ'ɍʹg$oowN/W=gG^”l^lپJuX6SOO/2Nzd8 v6-q2dS}w7=;GAybc235O)GA oKԛ1Gk{lNSpWA}!MN6i0V~nEF|'@0_1M# O"(ytk%+;Xō`*5F.2BJ Z?K;CS?|rU)7LڷW;ފ f#)3⳱qì {Ps ũЏZbg]nO amOJawgv.|-XZ5;,"ok9;Pik7?_gVIv.d2=e\ C 1vcͦ4HQV K9H v- \֪jbya jݏWb5%l [N ?gl,̤ܳ]xZyՋ=ξ:"\z5]97 >e G JԘ<@40*FAeUxmGSg ~+J4#p\􎅝t 6cJw}GO1 #h݊U<KߡҼfpJlu"@֛CS&o912-ί:9\TJi`гh aڊdsgX eAo<kDo=q-ȷ1fwVu%/'L:_'标?@w*iFxjp[Z1 ggpן.>JMYqFCLvUJk^8}_ & 1_$eUi]Gܯ^VJw66yiE]P˻%_64>&)'EC/㣱u-Ǧu"f#rwqh14 j;hR PYã&$u*Azۡl|3l$Dx 8TJHƿ%21()`XdJ>3>Hrk0/g`R72KQ OS_VS * N7!xl[ 8sY_!jW>ނ<5DOm;X ">O2Sg(ެ&T 4-?p=7 t60fc6-T.xv`T@;T2Q8K2 myryU3~ҼaaNɞ_Z8) ٵ;^}Gj` *%hs-c+ֲS o; {Zn2G)j>n+yfM 0)chQUX2TLYn<]?1jmQϫjSyH ja!D.JS-p$)DjJj,SBgwn^sU&I}Gfl" ڰ t^Zȝ5&17T3 xN Cd~&JBN5[I}a6?^#0L\Z0+܇`.O OFIm׿:9ͮz:qO!{wtggљ_+2:?.<]qե}3%Rd6FͰEذLNV<Ĝ@CXJwZLj{gJJ{~pG>>+Q}tiUҗB ^?( ֽU[~j_og2~(ckɠqjQ3Y4Z. s*邱xsG+mlJtZ lcL+: y˵RAj4NK'Z; [%E̙uʲ :@Sp>5V3X԰{YSB2 WOe.`%uTuCӕfՏ6rb0ґ"JU0|O{P;xh yתŞod+aam=92T37{ϼmC]/zC˜l[h}Qd3k$~\5>9̬՞߅)=,YVSz,A`ڡ)LŎZxוȲX_ƖYfƮ?jm,Ԍ W *2jB:]L>#H!Fj`rYWA0nwM7GUDp8 4q@զ@Rr㏴VED|n!1erҷ-#)&0P[hg-1[|rn:`.  Bc RxVDY<ʓb{7>4].N.IH~H"90 LIuW` a tO_H;cNl3#.yKЯ0HQֵ\` +>0 'pݫ)='Kɼ4n^%kGdlqCd@0t!F4za}u@QNrҼ[ h5>x15weDnVr]IC0.݇:ݣW׏CU|2NKaU0>ޜ[_Rcx"*ؤ5$J _ӻ%Q)&`\D[W(E_xrӟZsc^J^DL6<"c`~Y@S7A^Ni=fv.<ڟVh|6=®8n "RNX)|AHV2f1{!AuKL|vZ9BtH [zy'[Ɂᛝ/v#:%9m d<͔Wsz_m kQ#^}FzթJ}]5Zk5b3>e *q !u"b¡ h`V*aEX j`v|S8>FgP:0)c" 蟐]my$,eD5(ey՛[ԕx n/G mXwl{0n5cEU\GD[DX\%h̉U\F[n <)0%,ةQ4&Ѝ%VNGɼG֔ƨy[&p$ϲ"^/TEtN.M/.~W;hB`KF rh}֓-h^4uyv\rtӐʍ͠ }>tki wrOB}u )L<*O 8 *jpm&N/q؜,nv]Yp"&F~5] jUkrȗ 9L;~$z= ~8+-xWBaͭ(4Dgh7ăr#m ُ9V Iȍ0}S;֐ϔSldr&(v4o wuMިb߰W>)׶/5Aʒ.[p=f٪Zt a+lBy,+&XK[v9-RcW݁g`VP1`˿T7.@.1=+ñ(+0J0Hj}F8Q8ے Zd?e7;|ܐ?WpҐSmA֪*٨G(mm&iPlHd\#Rb+vS:,H<ߍTYWxY rQcO,m1kw!L- v;<`MFKW;թқ2E#pa%Piݙ}EEn&4fv51$loQC`\l!N[Vðy2{y B W}0n*GREof@HNW A#MKC Qoh<x#Q HfOzSS:>9o49H͚H)d}kCzc!0!?Zkg?ݷ,Ccs*%}pY<-n)ЃT+>VݙbnEP:(V`buufv rJl0z` #0=ےLFޙi,|E>c*f ?H!8{~n(49p#9wOި ];UE޾+9}r EE Vm?Snh0-m/8uQZOdĂ Q)<2q~n49zvwC=brcǞr{WyERqօԱ+}|fOţ@ĜIlA$U4W (z D*R o!&i;cgA(| %)N?C ny;u-tL̾