libnftables1-0.9.8-150300.3.6.1<>,v4db'Np9|HxרTs?a=Zeu )~60]A$٣:Rm@B &#,nsY =\𐧼Tzֿi6R*wRՀŔߥ } 'OEvMj*{YR-oKq OǏR, /AiDRx0ky5p{e&RWHm +c8yi$;9`v#z\NťMŞKpܩU~ J>@'x?'hd " I ?EPX \ ` h  D(89<:>$@$F$-G$DH$LI$TX$XY$d\$]$^$b$c%od%e%f%l%u&v&w&x&y&z''''"'dClibnftables10.9.8150300.3.6.1nftables firewalling command interfacelibnftables is the nftables command line interface placed into a library.db'NnebbioloF SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Librarieshttps://netfilter.org/projects/nftables/linuxppc64leF db'Ldb'Mf211cf4d7514882c9a1ced54dcaaeb75c3cb22cdea3b1c0a3d84a5663331c195libnftables.so.1.0.0rootrootrootrootnftables-0.9.8-150300.3.6.1.src.rpmlibnftables.so.1()(64bit)libnftables1libnftables1(ppc-64)@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.22)(64bit)libc.so.6(GLIBC_2.27)(64bit)libgmp.so.10()(64bit)libjansson.so.4()(64bit)libmnl.so.0()(64bit)libmnl.so.0(LIBMNL_1.0)(64bit)libnftnl.so.11()(64bit)libnftnl.so.11(LIBNFTNL_11)(64bit)libnftnl.so.11(LIBNFTNL_13)(64bit)libnftnl.so.11(LIBNFTNL_14)(64bit)libnftnl.so.11(LIBNFTNL_15)(64bit)libnftnl.so.11(LIBNFTNL_16)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3dGbo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.commatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this fixes a crash in nftables if layer2 reject rules are processed (e.g. Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching./sbin/ldconfig/sbin/ldconfignebbiolo 16841541900.9.8-150300.3.6.10.9.8-150300.3.6.1libnftables.so.1libnftables.so.1.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28999/SUSE_SLE-15-SP3_Update/ed4025453dccbe5250bf320898c5bdb1-nftables.SUSE_SLE-15-SP3_Updatedrpmxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=18fe581764f52ad0ec784ce7ea8e4a591b24429c, strippedPR RRRR RR RR RR RRR`;"g"_)utf-86672553be22e497b3563b5b04c9a333c03e97bd1da246dc2a6b9de0323491764?7zXZ !t/]$JT]"k%f0]dZaȗ2v=ZB T#Iqi%ٜɵ9?Z1*?1@\c}rnO4D)TdMylNlaҌsl:Z12s.t;pJz*}[R}v~kɕV7c"aJ=\u~p;I__4{G!X"DOݩT~Hܭ4)cB6;aT$ƀ/}i+P[")i֤^u3Fם5y&rxZF[<3TJoXvQw+ 7\1mavyCF'Dz:KkUPyH*.,=xmS8֠R,о/J/!=(c}&%r/5e)܏w8 )U9UvmyHxJ]_`nj;Iº4Q[jTM{ N2.RKXsX1B\ oRbxr=mɻg"8OX^&͑\Taһ1^|~ù]θ ^?kȎn[>?;=0̠kg+)3hi>)x7ץ~IZq ͿDn̚uMܙ Cn`ƃI<⺦)!`tBvFelz;lu-L.g?,# Cy@o*N>i= J3zݟ˥y|A.mj YzK0hVGԁ,ኒimL|kas{c'gixj"匫OV%'J8caHVX{tC[l*53}AԠhtE\z_8[`c_AQG7(vp~Ry_xC=7lZ0\Œq n'0:mj!:L XGo;7vkM HNq坺9~B`c #냩eEvqEp' QnJF L{wD&b$Z5VJZ!a~H/Q;`-G\Δ  /$V*E灁Rh\$&$wr+]%2ØZP`a*^'ePbs٢0-m1I,Z23fs6 SN&[a o]%tZgĉçel L̽Vm^pZ"DAfaj(4P!i5fu̻Y_k=|n`V{~?7J;;!>!-/v&dPOY Eu7+v罸Zt_j-xةLSjAi5Pb/$xI:rT cPH[.N $לJnvz|ïB\>^>'yhQHr]Jtœ;nTN#S#(c2?F+/"c'K](T[ ?5擆۵pzjޱx5B8V7(_ 0P†];AXt~nO`RGR'נTyg=Eoyvf$2w%[zsLXl_9R% }5 mp_;|)oY0Hv«HvIy/ cƖ;l;YCuPS>@}}Veg<IDrG =)ۋCD3d k `Jp\&(xBn5"Y 0Jo(Y U$(C9dLy9\/^+[d q=Wp-ESf؄eU#'T4H*-bۭ@hrI0kJ>·"Q$APZ?OSz54>0~GF+Kz#t8쟃lz^{H'ZOF !1{+)?O`s2NKO="6cTV&,MyAd U@B1&6V)7PyM*HD7Ηk2iO@y˝5Ff+5 NN3tXB:Myb^=pו~x:{n7v8L҃@6Bj$sYQ$Un@S5ѝ+ `]u[h jBm%Iha\^`؜w+oldoֻ\Q@,!uMI؂R~0ñ'ZG4J&gJ̮YNj'ÙyžkuˣGz1N4ko1AɊ.kkL^:N6/0MI?&r2F H .L=*F&HMNN4AsdP] = tɇQ 6ao$č/xjmEU v_R"O <z6 a#oƲXkc:g=Gt; #OzT ,#W^v]W_Ev>oegѠݎ8+#|85,ef9e=% }-%g yGHOV~-,V.ZNt'7 bO\58$£"sRQ5PR]N>-̎(2 P#-p4Ǟ\N_0o0rpmJT)/e! auhm)kg7ܻc66,Ndf.ۅ}d_rJ9^~P?kQ-_[|l'̴VUY(P3~5<-O2T:j]B iJsV^ ae§u}K{1rw6n?}^>B+"Dk|4Am,ݲ'!4m-0/mBh7~<8kG^ks-_]GwVlj"ަ%,JEVw!#9V7ڈ5 WjBıiu{\vƊjbW)J_ @FS+Iy3e3|1+\m 0ObwۻK 7{m=&ҟc9V S ff>񿵦} Wφo,@Om| f :P8׋BK }>rpL+'.|Vx]l-[DS~gCQx?hZ^aIGѰ4 f2k =Y1 HX*\5W-am/n~G/Jm.$u0msɿzF}-c (M=NZ-T5  G'?B$l͊N8^5;jY,RETFw'?u VWe d?VIخáR2\D2;@J!yߗ݀k߬e01G7~tm{)HP VYh"8kꈮfMV:UIsM➡J 1S8 @CS~wIeh;SL"__uܭr_3;i peMaLC!pdIY!?:(WFM"!k H8"eHK$h @mL(|<}$;^N SKq jTD{ܡߜ;{,Et!}HA1v=I ǟL VN;0..ђOҍSs*ZLZ8I yB(&[ɯ$÷_;t_JGe@:j  ei[rPiG>L<({Aw 'o<{wFI# e%2o MS4lLҪܹ KƤWEX-r pnp_FI>46U^μ)quǍ!;+1xPKӁy^[?0.Ct|KX"hCw"5++X i(x7:9">8Zi~ Nb+s_4%cFB2erD6DA@dr>T42[|OVe)4Bc%l\ =]']>JJ=ט x1$#$P>al39-hD0 ,iJ*Qy =hF&kmyH*laxG/63& M]-dNģ(u'7 KdaXp/"rb+PfY2 B2@ C E"zqWcFUY}s UK\I%IGxC2i jE$ޤAB˩ZXVr#X._yH:sIٙ'Y< A?MR[t%Ƣ}x樋-sI:9!b]:T}@RFي`FYw!4-(=Ѧb|Jp[q0Ƹu;Fkj*۹M6ܕaxك3Z(Q3C{״HoV~etQ3U˔ ^5pch/IuE?8oBZ$!\Jiy])L2غ/[AXl_Z=@M6RWUxR.9i vp4A& \uF IF |F<*b(rWq$"Ck4xٲܕ0:qm836 EpZAZmISNтͦgOKQ,04,\S V΀}hI6 D⺩!Hst$g!SԤ8nU:2}I ѽ Ʈ|pCլ4I,>h:S J6fgu۝xbBjWS]6s˛Bvմr@oa pu|)y}Z%ZLo=f (GP*ہ3 A{")Lh?$ad1`<  ?f[yFx Gx@Cu!.*LHOeqNxD7+ãIUchVCn4GP̆rt~  NDA2 XT7 8Ą?GbY2EKfqq)9Oym*#*T;6=eW*x;y $ӄ:6]%]5x x(N nI6%~8Bɋ:(?!HnW[+hhr,2(%ցpM#}U[GmϚips]!bأ@w``'.߄\ؕ{f=Mw܅c6G֯(Ψ/ {ɤm26k+. 3ȷ7H}!>KCő#2hv:t%$'./7WCtL#W=[F|#@sq/?8wwo&5|f6b;X1bai駓?@t".4a hxbjV 4Y-̨Mޝ5j/

jx svXGX<~K2l+pѢ {)I3(nwn! r!;sA VK,_DB ^d~xh3X@Yȼ+Vs\àP_鑤7E2E3 *ؚmt\paƲ^ו1*un#vKB l4~x++W;틐q̹w/T@S{Ae "C N7 .~A9psT}1[ggy]Do OFV0+F.z0:hU f }4յ|tKҲ68-lnt\. @>lG;>WAp# w\j\}hv33Oo"wya@%7`N 펾#wF(tg.0n܌P G9J6yvLl峦nIXAoj >]OQǙGͣ$/*rnK6Oͫ7uGJu,<@ 71sx,,2Z `O0E>>1: 1 &λKZfT`@< tۇ(s#YD{q|L<ḁ1 еV m?WXqGh76LݽUW: BgЧan請[n\>o.t$9PzY" Zʔ]FO@":VR$Q--чf>^ +r,+H)Bnq*"ݾcw⸷\Ng;bV;ʞE<٦ 7vt%mPgn\HkluvN{JŴr˧[OL43aĈ{癲锘"!ϢUeCAUb1G &zU)x%IvB&D!W kin9WƠN\:Qacf@TDf*dv#TPHׄmD4@6#Y S0c+y`t/B/#6/:M -(JRB,]L%_)9mF3yC@+de2ucVu-h~o!ϛd5%=Kh. y%6 0ݎ銹Ӎyޮ~%op\E)!y;\ K\\Q WŁ|*^3_Y 4?}:DQ1d4X#e tUdP]ok!*g Z(I5m3M6Nc< MgjIA9eddEF+GH0i^ ILΞͤ/ϻ[@E60e^q9?\tǾIč_֬;@;(>Xp8٢^X] })J3t lɏl ҎPzl[ʎ&l`'9r 8aϹ/xfK1=8ltTw*c8԰/veP16qOqO8+V'n馄~%gNVHHR-xP|SQ])@u :/ҿc~-Uô~ ~:ygI^g-8""1K!pˆ./:09_2f9*,m- L 3Ǘ%7b|eFKpwΜ &tOYE#[NREůp7jK? >zJA<>X"{eED,3c݀ɐU!g>"73wo-_G 2=ͅ5N}ʰe ,ДmnیTO%$L^'9{QT(x۲(`.L/ʖ/JޔPpz៊aP32ߊ%RG`G@S`?Gl mr| 6X BLdbo"7@x!3y>8 ېDƏ8\!*8|!PzibL`A7Mzl*IkM-N=enAg )U]iD=jD;2 i幨 ;zvZO_\^6 +IvtE=ԡlXߴfo)ǛH507]=tdEq|\?)!Ϸ**S4]ʡLms..c]ǭ~ ݜ0Uo-[ ,ěs ޾H?Em Z3S&~^>X;M&6dTWlP]()'1'!ۭY'zl>5Y5KbL:KXX?[<7tBgePjF8WiliB<ɚ$ׯ܎X9F46>mzoO. qY#<)BiF6$ސJ}0sT{a̔޲(Y6;z}+\Pt lQA&ONU8ت9D[漖t9 СJl c;25}6[K>5Ա JfL, #-f f&d X펥J 尙7P` ;&c !2%Y&;{W^x|цfd{;lS<i˒vB8& Sj_9[U|8тa.Bu؂TCpzHJ)cT-O3=%_:ᏦNr5 yx**/ }8 5Ǚ%mzNxKhயcR.ILUs˥d"p%9Hnճ}_Ƌ-hѴ ]oMFK'¡Wk$ԧ*)̐N;4\Bt?Ev},>Vr{}Vdi^k#u1:&E+ARp޷i \t,{ ~5fex+;$\_I;|2+ѭ}Xg&z\4=aq<̻!!*w!t/? Uj\Stfa#3ũ<^6V<c >8;Vyw/:tjj5yL4 n#~;1dmAS_oz8H&%#\njl0aM!7 /-\|9,vlxOsVB?[wq;q.D3 č&ʐpu>Ҫ- GE*&y4v6XRolye4Xw3|u8JI/0,Gm?ck&WwFy9d5`4 8xiSj{kB?Fw'/H{m*Rmk^ U(EaHeL%4'I;.(}XւG0QUPz8Ey< $UʟV`j™tE?ܢȈ:S#Ж:]j,CʌZgi SޚdP~zdcnGj jOzo| AyEsMC] qAV{21\zgɎoMbI觎1wżRfzKNqrul YZYrK.M,UKXH/RXI{ \bfXc:>׳4.M5iI5BY紏oMN3ÈlS4$)7_CMr3sꥍw4~L5Bn ;ܢ"M9H-  HG _)|u0*ꆇ*{s  kWj_RYN܉z.{ߒڠMV4jˈwc=eZ.f_@١߮]i4yiB?LX-q)Irk1>G(PxGa2%Ok4A. 5&oLH'@%H/ QvSUxN_7ʳ_%v$Qo;U#gG !%,Unƻw왓քB)kAv:E LNDЁ5ƱgztYE57VzX1Y-Ol6Imk 7u7n~^/*p)[f#h)x%jTj3b#yr=>mBI- ~_ܖ0nдAvD HB|"z/j5˳ZФw~B(KB0j\Rźo!&6%LkbIꌶT֫I =6Cqk䤏1[4Fe} ia9,@mZP<*T^:nZhy ZAz(/IT2(*6롺Tn]R,^ K~e>jD^[ ZEMcP_Wn?RZQ^?r2.ʦX[!{z0ǒL<+2C}CiX+P>qժ2$#"{#'yPN΅mo]30Y`\q,2圡dQKb̟TW4?qůHB] b'+p:ȲLf{2e "NĆb kS]5+lR'' [L1I+4X#(#޻o/Ll4+J<"sS-ef1(1RT ퟤD`Hd"$Ex,\IRL!SVŰN_R`Dx׼F%} Es|ɋ`.*"yQy CӾ(Ѝ)'5a]3ז)&GlwX8DO3h4^WNiԂQ[de֨+qeKd=]RJ/-iG魒@BE7/r<#BƜ3?h,#/,T6}=gB: ?uA MpZkaCk2ؽ6` f8eX xk ɰo+44y,q3( .Bdr& YZ