8000 असमर्थित फ़िल्टर त्रुटि: · Issue #365 · google/capirca · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

असमर्थित फ़िल्टर त्रुटि: #365

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
TheProdigyLeague opened this issue May 24, 2025 · 0 comments
Open

Comments

@TheProdigyLeague
Copy link
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter/capirca (master) $ ~/.local/bin/aclgen
Traceback (most recent call last):
  File "/home/codespace/.local/bin/aclgen", line 33, in <module>
    sys.exit(load_entry_point('capirca==2.0.9', 'console_scripts', 'aclgen')())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.local/bin/aclgen", line 25, in importlib_load_entry_point
    return next(matches).load()
           ^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.python/current/lib/python3.12/importlib/metadata/__init__.py", line 205, in load
    module = import_module(match.group('module'))
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.python/current/lib/python3.12/importlib/__init__.py", line 90, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "<frozen importlib._bootstrap>", line 1387, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1360, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1331, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 935, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 994, in exec_module
  File "<frozen importlib._bootstrap>", line 488, in _call_with_frames_removed
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/aclgen.py", line 22, in <module>
    from absl import app
ModuleNotFoundError: No module named 'absl'
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ pip install absl-py
Collecting absl-py
  Downloading absl_py-2.2.2-py3-none-any.whl.metadata (2.6 kB)
Downloading absl_py-2.2.2-py3-none-any.whl (135 kB)
Installing collected packages: absl-py
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
capirca 2.0.9 requires mock, which is not installed.
capirca 2.0.9 requires ply, which is not installed.
Successfully installed absl-py-2.2.2
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ ~/.local/bin/aclgen
Traceback (most recent call last):
  File "/home/codespace/.local/bin/aclgen", line 33, in <module>
    sys.exit(load_entry_point('capirca==2.0.9', 'console_scripts', 'aclgen')())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.local/bin/aclgen", line 25, in importlib_load_entry_point
    return next(matches).load()
           ^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.python/current/lib/python3.12/importlib/metadata/__init__.py", line 205, in load
    module = import_module(match.group('module'))
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/codespace/.python/current/lib/python3.12/importlib/__init__.py", line 90, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "<frozen importlib._bootstrap>", line 1387, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1360, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1331, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 935, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 994, in exec_module
  File "<frozen importlib._bootstrap>", line 488, in _call_with_frames_removed
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/aclgen.py", line 25, in <module>
    from capirca.lib import aclgenerator
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/lib/aclgenerator.py", line 23, in <module>
    from capirca.lib import policy
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/lib/policy.py", line 25, in <module>
    from ply import lex
ModuleNotFoundError: No module named 'ply'
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ pip install ply
Collecting ply
  Downloading ply-3.11-py2.py3-none-any.whl.metadata (844 bytes)
Downloading ply-3.11-py2.py3-none-any.whl (49 kB)
Installing collected packages: ply
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
capirca 2.0.9 requires mock, which is not installed.
Successfully installed ply-3.11
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ pip install mock
Collecting mock
  Downloading mock-5.2.0-py3-none-any.whl.metadata (3.1 kB)
Downloading mock-5.2.0-py3-none-any.whl (31 kB)
Installing collected packages: mock
Successfully installed mock-5.2.0
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ ~/.local/bin/aclgen
F0524 01:09:19.170531 131313876599424 aclgen.py:625] bad definitions directory: ./def
Fatal Python error: Aborted

Current thread 0x0000776de4f80280 (most recent call first):
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 1002 in emit
  File "/home/codespace/.python/current/lib/python3.12/logging/__init__.py", line 1028 in handle
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 1053 in handle
  File "/home/codespace/.python/current/lib/python3.12/logging/__init__.py", line 1762 in callHandlers
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 1228 in handle
  File "/home/codespace/.python/current/lib/python3.12/logging/__init__.py", line 1684 in _log
  File "/home/codespace/.python/current/lib/python3.12/logging/__init__.py", line 1609 in log
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 1211 in log
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 627 in log
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/logging/__init__.py", line 417 in fatal
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/aclgen.py", line 625 in Run
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/aclgen.py", line 696 in main
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/app.py", line 261 in _run_main
  File "/home/codespace/.python/current/lib/python3.12/site-packages/absl/app.py", line 316 in run
  File "/home/codespace/.local/lib/python3.12/site-packages/capirca/aclgen.py", line 705 in EntryPoint
  File "/home/codespace/.local/bin/aclgen", line 33 in <module>

Extension modules: yaml._yaml (total: 1)
Aborted (core dumped)
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter (main) $ pip install capirca --user
Requirement already satisfied: capirca in /home/codespace/.local/lib/python3.12/site-packages (2.0.9)
Requirement already satisfied: absl-py in /usr/local/python/3.12.1/lib/python3.12/site-packages (from capirca) (2.2.2)
Requirement already satisfied: ply in /usr/local/python/3.12.1/lib/python3.12/site-packages (from capirca) (3.11)
Requirement already satisfied: mock in /usr/local/python/3.12.1/lib/python3.12/site-packages (from capirca) (5.2.0)
Requirement already satisfied: six in /home/codespace/.local/lib/python3.12/site-packages (from capirca) (1.17.0)
Requirement already satisfied: PyYAML in /home/codespace/.local/lib/python3.12/site-packages (from capirca) (6.0.2)
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter/capirca (master) $ ~/.local/bin/aclgen
I0524 01:10:40.133004 131864350544512 aclgen.py:633] finding policies...
W0524 01:10:40.134793 131864350544512 aclgen.py:560] --> policies/pol (32 pol files found)
I0524 01:10:40.178050 131864350544512 sonic.py:237] Skipping policy allowtointernet as it does not apply to any of frozenset({'inet6', 'mixed', 'inet'})
I0524 01:10:40.178535 131864350544512 aclgen.py:493] file changed: sample_sonic.json
W0524 01:10:40.183174 131864350544512 gcp_hf.py:324] WARNING: Term test-folder-ssh-v4 is not being rendered for inet6, because there are no addresses of that family.
I0524 01:10:40.184175 131864350544512 gcp_hf.py:235] INFO: Term test-multiple-protocols-tcp-icmpv6 is being rendered using protocol number
W0524 01:10:40.187821 131864350544512 gcp_hf.py:204] WARNING: Term test-multiple-protocols-tcp-icmp is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.188072 131864350544512 gcp_hf.py:204] WARNING: Term test-icmp is being rendered for inet6, ICMP protocol will not be rendered.
I0524 01:10:40.188163 131864350544512 gcp_hf.py:235] INFO: Term test-icmpv6 is being rendered using protocol number
W0524 01:10:40.188378 131864350544512 gcp_hf.py:214] WARNING: Term test-igmp is being rendered for inet6, IGMP protocol will not be rendered.
W0524 01:10:40.189108 131864350544512 gcp_hf.py:276] WARNING: Term test-egress-address-v4-only is not being rendered for inet6, because there are no addresses of that family.
I0524 01:10:40.189532 131864350544512 gcp_hf.py:583] Policy testhf quota cost: 30
I0524 01:10:40.190288 131864350544512 aclgen.py:493] file changed: sample_inet6_gcp_hf.gcphf
I0524 01:10:40.205874 131864350544512 arista_tp.py:930] INFO: term accept-traceroute in policy MIXED-TRAFFIC-POLICY expires in less than two weeks.
W0524 01:10:40.206164 131864350544512 arista_tp.py:937] WARNING: term accept-traceroute in policy MIXED-TRAFFIC-POLICY is expired and will not be rendered.
I0524 01:10:40.206482 131864350544512 arista_tp.py:930] INFO: term ipv6-accept-traceroute in policy MIXED-TRAFFIC-POLICY expires in less than two weeks.
W0524 01:10:40.206562 131864350544512 arista_tp.py:937] WARNING: term ipv6-accept-traceroute in policy MIXED-TRAFFIC-POLICY is expired and will not be rendered.
I0524 01:10:40.214196 131864350544512 aclgen.py:493] file changed: sample_paloalto.xml
I0524 01:10:40.223646 131864350544512 aclgen.py:493] file changed: sample_ipset.ips
W0524 01:10:40.223852 131864350544512 gce.py:302] WARNING: Term test-ssh-v6 is not being rendered for inet, because there are no addresses of that family.
W0524 01:10:40.224374 131864350544512 gce.py:302] WARNING: Term test-ssh-v4 is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.224474 131864350544512 gce.py:302] WARNING: Term test-multiple-protocols is not being rendered for inet, because there are no addresses of that family.
W0524 01:10:40.224882 131864350544512 gce.py:342] WARNING: Term test-multiple-protocols-tcp-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.225288 131864350544512 gce.py:359] INFO: Term test-multiple-protocols-tcp-icmpv6 is being rendered using protocol number
W0524 01:10:40.217487 131864350544512 arista_tp.py:1000] WARNING: term allow-dns-fragments uses fragment as well as src/dst port matches.  traffic-policies currently do not support this match combination. the term will not be rendered
W0524 01:10:40.226004 131864350544512 arista_tp.py:988] WARNING: term ipv6-allow-dns-fragments in mixed policy MIXED-TRAFFIC-POLICY uses fragment the ipv6 version of the term will not be rendered.
W0524 01:10:40.226698 131864350544512 gce.py:337] WARNING: Term test-multiple-protocols-tcp-icmp is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.227235 131864350544512 arista_tp.py:1011] WARNING: term invalid-action-next uses an unsupported action (next) and will not be rendered
W0524 01:10:40.238633 131864350544512 arista_tp.py:1011] WARNING: term ipv6-invalid-action-next uses an unsupported action (next) and will not be rendered
W0524 01:10:40.227809 131864350544512 gce.py:302] WARNING: Term test-multiple-protocols-tcp-icmpv6-v6-only is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.234524 131864350544512 openconfig.py:316] Total rule count of policy None is: 55
I0524 01:10:40.243909 131864350544512 gce.py:359] INFO: Term test-multiple-protocols-tcp-icmpv6-v6-only is being rendered using protocol number
W0524 01:10:40.244218 131864350544512 gce.py:302] WARNING: Term test-multiple-protocols-tcp-icmp-v4-only is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.244825 131864350544512 gce.py:302] WARNING: Term test-web-tag-v4-only is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.245031 131864350544512 gce.py:302] WARNING: Term test-icmp is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.245128 131864350544512 gce.py:302] WARNING: Term test-icmpv6 is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.245350 131864350544512 gce.py:359] INFO: Term test-icmpv6 is being rendered using protocol number
I0524 01:10:40.245547 131864350544512 gce.py:359] INFO: Term test-igmp is being rendered using protocol number
W0524 01:10:40.245815 131864350544512 gce.py:347] WARNING: Term test-igmp is being rendered for inet6, IGMP protocol will not be rendered.
I0524 01:10:40.248884 131864350544512 aclgen.py:493] file changed: sample_cisco_lab.acl
I0524 01:10:40.248465 131864350544512 aclgen.py:493] file changed: sample_openconfig.oacl
W0524 01:10:40.257138 131864350544512 gce.py:308] WARNING: Term test-egress-tag-v4-only-e is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.257280 131864350544512 gce.py:308] WARNING: Term test-egress-tag-v6-only-e is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.257781 131864350544512 gce.py:584] Total rule count of policy EGRESS is: 28
I0524 01:10:40.258632 131864350544512 gce.py:586] Total attribute count of policy EGRESS is: 90
I0524 01:10:40.259717 131864350544512 aclgen.py:493] file changed: sample_mixed_gce.gce
I0524 01:10:40.260134 131864350544512 aclgen.py:493] file changed: sample_cisconx.nxacl
W0524 01:10:40.269460 131864350544512 gce.py:308] WARNING: Term test-egress-address-v6-only-e is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.269801 131864350544512 gce.py:584] Total rule count of policy EGRESS is: 3
I0524 01:10:40.269908 131864350544512 gce.py:586] Total attribute count of policy EGRESS is: 10
I0524 01:10:40.270255 131864350544512 aclgen.py:493] file changed: sample_gce_vpc_tf.gce
E0524 01:10:40.273534 131864350544512 gce_vpc_tf.py:498] Terraform does not currently support ipv6!
E0524 01:10:40.274647 131864350544512 gce_vpc_tf.py:498] Terraform does not currently support
8000
 ipv6!
W0524 01:10:40.275328 131864350544512 gce_vpc_tf.py:333] WARNING: Term test-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.275717 131864350544512 gce_vpc_tf.py:350] INFO: Term test-igmp is being rendered using protocol number
I0524 01:10:40.272851 131864350544512 aclgen.py:493] file changed: sample_arista_tp.atp
W0524 01:10:40.278833 131864350544512 gce_vpc_tf.py:333] WARNING: Term test-multiple-protocols-tcp-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.279416 131864350544512 gce_vpc_tf.py:602] Total rule count of policy global/networks/default is: 10
I0524 01:10:40.279495 131864350544512 gce_vpc_tf.py:604] Total attribute count of policy global/networks/default is: 32
I0524 01:10:40.280050 131864350544512 aclgen.py:493] file changed: sample_gce_vpc_tf.tf.json
W0524 01:10:40.290084 131864350544512 junipersrx.py:555] WARNING: Term test-inet6-webserver-traffic has 0 valid source IPs, skipping.
W0524 01:10:40.291373 131864350544512 junipersrx.py:555] WARNING: Term test-inet-webserver-traffic has 0 valid source IPs, skipping.
W0524 01:10:40.299209 131864350544512 gce.py:342] WARNING: Term test-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.299698 131864350544512 gce.py:359] INFO: Term test-igmp is being rendered using protocol number
W0524 01:10:40.300007 131864350544512 gce.py:342] WARNING: Term test-multiple-protocols-tcp-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
W0524 01:10:40.300890 131864350544512 gce.py:308] WARNING: Term test-egress-address-v6-only-e is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.301061 131864350544512 gce.py:584] Total rule count of policy EGRESS is: 12
I0524 01:10:40.301131 131864350544512 gce.py:586] Total attribute count of policy EGRESS is: 38
I0524 01:10:40.301497 131864350544512 aclgen.py:493] file changed: sample_stateful_multitarget_simple.srx
W0524 01:10:40.307000 131864350544512 paloaltofw.py:457] WARNING: Term test-tcp-established in policy external>internal is a tcp-established term and will not be rendered.
W0524 01:10:40.308655 131864350544512 paloaltofw.py:451] WARNING: Term test-dns-replies in policy external>internal is a established term and will not be rendered.
W0524 01:10:40.309031 131864350544512 paloaltofw.py:457] WARNING: Term test-tcp-established in policy external>internal is a tcp-established term and will not be rendered.
I0524 01:10:40.308239 131864350544512 aclgen.py:493] file changed: sample_gce.gce
W0524 01:10:40.309394 131864350544512 paloaltofw.py:451] WARNING: Term test-dns-replies in policy external>internal is a established term and will not be rendered.
W0524 01:10:40.309663 131864350544512 paloaltofw.py:581] WARNING: Term test-inet6-webserver-traffic in policy unknown>internal has one or more invalid src-dest combinations ['ip4-ip4'], term will not be rendered.
W0524 01:10:40.310452 131864350544512 gce.py:302] WARNING: Term test-ssh-v4 is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.310739 131864350544512 paloaltofw.py:575] WARNING: Term test-inet6-tcp-icmp-traffic in policy unknown>internal references ICMP protocol, term and will not be rendered.
I0524 01:10:40.310858 131864350544512 paloaltofw.py:219] INFO: Term test-inet6-tcp-icmpv6-traffic in policy unknown>internal contains port-less tcp with non-port protocol(s). Moving icmpv6 to a new term.
W0524 01:10:40.311115 131864350544512 paloaltofw.py:566] WARNING: Term test-inet-webserver-traffic in policy unknown>internal has one or more invalid src-dest combinations ['ip6-ip6'], term will not be rendered.
W0524 01:10:40.311204 131864350544512 paloaltofw.py:560] WARNING: Term test-inet-tcp-icmpv6-traffic in policy unknown>internal references ICMPv6 protocol, term will not be rendered.
I0524 01:10:40.311092 131864350544512 gce.py:359] INFO: Term test-multiple-protocols-tcp-icmpv6 is being rendered using protocol number
I0524 01:10:40.311277 131864350544512 paloaltofw.py:219] INFO: Term test-inet-tcp-icmp-traffic in policy unknown>internal contains port-less tcp with non-port protocol(s). Moving icmp to a new term.
W0524 01:10:40.311514 131864350544512 gce.py:337] WARNING: Term test-multiple-protocols-tcp-icmp is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.311861 131864350544512 gce.py:302] WARNING: Term test-web-tag-v4-only is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.312061 131864350544512 gce.py:302] WARNING: Term test-icmp is not being rendered for inet6, because there are no addresses of that family.
I0524 01:10:40.312365 131864350544512 gce.py:359] INFO: Term test-icmpv6 is being rendered using protocol number
W0524 01:10:40.312734 131864350544512 gce.py:347] WARNING: Term test-igmp is being rendered for inet6, IGMP protocol will not be rendered.
W0524 01:10:40.314190 131864350544512 gce.py:308] WARNING: Term test-egress-tag-v4-only-e is not being rendered for inet6, because there are no addresses of that family.
I0524 01:10:40.315892 131864350544512 gce.py:584] Total rule count of policy EGRESS is: 11
I0524 01:10:40.313115 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.324738 131864350544512 aclgen.py:493] file changed: sample_nftables-mixed-multiple-headers-combo.nft
I0524 01:10:40.315842 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.325123 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.325297 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.320534 131864350544512 gce.py:586] Total attribute count of policy EGRESS is: 35
I0524 01:10:40.326103 131864350544512 aclgen.py:493] file changed: sample_inet6_gce.gce
I0524 01:10:40.329369 131864350544512 aclgen.py:493] file changed: sample_srx.srx
I0524 01:10:40.326467 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.331924 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
W0524 01:10:40.332219 131864350544512 nftables.py:739] WARNING: Term test-conntrack-established is a established term and will not be rendered.
W0524 01:10:40.332335 131864350544512 nftables.py:744] WARNING: Term test-conntrack-tcp-replies is a tcp-established term and will not be rendered.
I0524 01:10:40.332623 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.332754 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.332867 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.333018 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.336675 131864350544512 aclgen.py:493] file changed: sample_nftables.nft
I0524 01:10:40.345385 131864350544512 nsxv.py:513] INFO: Term accept-traceroute in policy sample_nsxv_filter expires in less than two weeks.
W0524 01:10:40.346175 131864350544512 nsxv.py:516] WARNING: Term accept-traceroute in policy sample_nsxv_filter is expired and will not be rendered.
I0524 01:10:40.356927 131864350544512 aclgen.py:493] file changed: sample_stateful_multitarget_simple.xml
I0524 01:10:40.361209 131864350544512 k8s.py:353] Total rule count of policy EGRESS is: 10
I0524 01:10:40.365216 131864350544512 aclgen.py:493] file changed: sample_nsxv.nsx
I0524 01:10:40.384749 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
I0524 01:10:40.386149 131864350544512 juniper.py:1053] INFO: Term accept-traceroute in policy LOOPBACK expires in less than two weeks.
W0524 01:10:40.386276 131864350544512 juniper.py:1056] WARNING: Term accept-traceroute in policy LOOPBACK is expired and will not be rendered.
I0524 01:10:40.389155 131864350544512 aclgen.py:493] file changed: sample_nftables-mixed-icmp.nft
I0524 01:10:40.392096 131864350544512 aclgen.py:493] file changed: sample_cloudarmor.gca
I0524 01:10:40.397248 131864350544512 aclgen.py:493] file changed: sample_packetfilter.pf
I0524 01:10:40.398333 131864350544512 aclgen.py:493] file changed: sample_juniper_loopback.jcl
W0524 01:10:40.402681 131864350544512 gcp_hf.py:209] WARNING: Term test-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.402822 131864350544512 gcp_hf.py:235] INFO: Term test-igmp is being rendered using protocol number
W0524 01:10:40.403130 131864350544512 gcp_hf.py:209] WARNING: Term test-multiple-protocols-tcp-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
W0524 01:10:40.405634 131864350544512 gcp_hf.py:276] WARNING: Term test-egress-address-v6-only is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.409357 131864350544512 gcp_hf.py:583] Policy testhf quota cost: 33
I0524 01:10:40.410030 131864350544512 aclgen.py:493] file changed: sample_gcp_hf.gcphf
I0524 01:10:40.406920 131864350544512 aclgen.py:493] file changed: sample_k8s.yml
I0524 01:10:40.432952 131864350544512 nftables.py:835] INFO: NFtables priority not specified in header.Defaulting to 0
W0524 01:10:40.433240 131864350544512 nftables.py:744] WARNING: Term permit-tcp-replies is a tcp-established term and will not be rendered.
I0524 01:10:40.433513 131864350544512 aclgen.py:493] file changed: sample_nftables-dev.nft
W0524 01:10:40.436946 131864350544512 gcp_hf.py:324] WARNING: Term test-folder-ssh-v6 is not being rendered for inet, because there are no addresses of that family.
W0524 01:10:40.437340 131864350544512 gcp_hf.py:324] WARNING: Term test-folder-ssh-v4 is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.438284 131864350544512 gcp_hf.py:209] WARNING: Term test-multiple-protocols-tcp-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.438470 131864350544512 gcp_hf.py:235] INFO: Term test-multiple-protocols-tcp-icmpv6 is being rendered using protocol number
I0524 01:10:40.439700 131864350544512 aclgen.py:493] file changed: sample_multitarget.jcl
I0524 01:10:40.441250 131864350544512 aclgen.py:493] file changed: sample_speedway.ipt
W0524 01:10:40.441540 131864350544512 gcp_hf.py:204] WARNING: Term test-multiple-protocols-tcp-icmp is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.442848 131864350544512 gcp_hf.py:209] WARNING: Term test-multiple-protocols-tcp-icmpv6-v6-only is being rendered for inet, ICMPv6 protocol will not be rendered.
W0524 01:10:40.442960 131864350544512 gcp_hf.py:324] WARNING: Term test-multiple-protocols-tcp-icmpv6-v6-only is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.443042 131864350544512 gcp_hf.py:235] INFO: Term test-multiple-protocols-tcp-icmpv6-v6-only is being rendered using protocol number
W0524 01:10:40.443360 131864350544512 gcp_hf.py:204] WARNING: Term test-multiple-protocols-tcp-icmp-v4-only is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.443450 131864350544512 gcp_hf.py:324] WARNING: Term test-multiple-protocols-tcp-icmp-v4-only is not being rendered for inet6, because there are no addresses of that family.
W0524 01:10:40.443634 131864350544512 gcp_hf.py:204] WARNING: Term test-icmp is being rendered for inet6, ICMP protocol will not be rendered.
W0524 01:10:40.443713 131864350544512 gcp_hf.py:209] WARNING: Term test-icmpv6 is being rendered for inet, ICMPv6 protocol will not be rendered.
I0524 01:10:40.443784 131864350544512 gcp_hf.py:235] INFO: Term test-icmpv6 is being rendered using protocol number
I0524 01:10:40.444004 131864350544512 gcp_hf.py:235] INFO: Term test-igmp is being rendered using protocol number
W0524 01:10:40.444154 131864350544512 gcp_hf.py:214] WARNING: Term test-igmp is being rendered for inet6, IGMP protocol will not be rendered.
W0524 01:10:40.445261 131864350544512 gcp_hf.py:276] WARNING: Term test-egress-address-v4-only is not being rendered for inet6, because there are no addresses of that family.
I0524 01:10:40.445324 131864350544512 aclgen.py:493] file changed: sample_multitarget.evojcl
W0524 01:10:40.445374 131864350544512 gcp_hf.py:276] WARNING: Term test-egress-address-v6-only is not being rendered for inet, because there are no addresses of that family.
I0524 01:10:40.446039 131864350544512 gcp_hf.py:583] Policy testhf quota cost: 82
I0524 01:10:40.447486 131864350544512 aclgen.py:493] file changed: sample_mixed_gcp_hf.gcphf
I0524 01:10:40.450386 131864350544512 nsxt.py:462] INFO: Term accept-traceroute in policy sample_nsxt_filter expires in less than two weeks.
W0524 01:10:40.450498 131864350544512 nsxt.py:465] WARNING: Term accept-traceroute in policy sample_nsxt_filter is expired and will not be rendered.
I0524 01:10:40.462546 131864350544512 aclgen.py:493] file changed: sample_nsxt.nsxt
I0524 01:10:40.462735 131864350544512 juniper.py:1053] INFO: Term accept-traceroute in policy LOOPBACK expires in less than two weeks.
W0524 01:10:40.462843 131864350544512 juniper.py:1056] WARNING: Term accept-traceroute in policy LOOPBACK is expired and will not be rendered.
I0524 01:10:40.466380 131864350544512 aclgen.py:493] file changed: sample_juniperevo_loopback.evojcl
W0524 01:10:40.980438 131864350544512 junipersrx.py:657] LARGE TERM ENCOUNTERED
I0524 01:10:41.610152 131864350544512 aclgen.py:493] file changed: sample_multitarget.msmpc
I0524 01:10:41.624357 131864350544512 aclgen.py:493] file changed: sample_multitarget.acl
I0524 01:10:41.625776 131864350544512 aclgen.py:493] file changed: sample_multitarget.asa
I0524 01:10:41.626843 131864350544512 aclgen.py:493] file changed: sample_multitarget.bacl
I0524 01:10:41.628006 131864350544512 aclgen.py:493] file changed: sample_multitarget.eacl
I0524 01:10:41.635237 131864350544512 aclgen.py:493] file changed: sample_multitarget.atp
I0524 01:10:41.638856 131864350544512 aclgen.py:493] file changed: sample_multitarget.ipt
I0524 01:10:41.639856 131864350544512 aclgen.py:493] file changed: sample_multitarget.nxacl
I0524 01:10:41.642449 131864350544512 aclgen.py:493] file changed: sample_multitarget.xacl
I0524 01:10:42.908046 131864350544512 aclgen.py:493] file changed: sample_msmpc.msmpc
W0524 01:10:50.240122 131864350544512 junipersrx.py:657] LARGE TERM ENCOUNTERED
W0524 01:10:52.419692 131864350544512 junipersrx.py:657] LARGE TERM ENCOUNTERED
I0524 01:11:18.661242 131864350544512 aclgen.py:493] file changed: sample_stateful_multitarget_complex.srx
I0524 01:11:18.908072 131864350544512 aclgen.py:493] file changed: sample_stateful_multitarget_complex.xml
I0524 01:11:18.934909 131864350544512 aclgen.py:574] writing 44 files to disk...
I0524 01:11:18.938696 131864350544512 aclgen.py:593] writing file: sample_sonic.json
I0524 01:11:18.939172 131864350544512 aclgen.py:593] writing file: sample_inet6_gcp_hf.gcphf
I0524 01:11:18.939619 131864350544512 aclgen.py:593] writing file: sample_paloalto.xml
I0524 01:11:18.940009 131864350544512 aclgen.py:593] writing file: sample_ipset.ips
I0524 01:11:18.940444 131864350544512 aclgen.py:593] writing file: sample_openconfig.oacl
I0524 01:11:18.940855 131864350544512 aclgen.py:593] writing file: sample_cisco_lab.acl
I0524 01:11:18.941211 131864350544512 aclgen.py:593] writing file: sample_mixed_gce.gce
I0524 01:11:18.941587 131864350544512 aclgen.py:593] writing file: sample_gce_vpc_tf.gce
I0524 01:11:18.941964 131864350544512 aclgen.py:593] writing file: sample_cisconx.nxacl
I0524 01:11:18.942367 131864350544512 aclgen.py:593] writing file: sample_gce_vpc_tf.tf.json
I0524 01:11:18.942790 131864350544512 aclgen.py:593] writing file: sample_arista_tp.atp
I0524 01:11:18.943212 131864350544512 aclgen.py:593] writing file: sample_stateful_multitarget_simple.srx
I0524 01:11:18.943684 131864350544512 aclgen.py:593] writing file: sample_gce.gce
I0524 01:11:18.944037 131864350544512 aclgen.py:593] writing file: sample_nftables-mixed-multiple-headers-combo.nft
I0524 01:11:18.944420 131864350544512 aclgen.py:593] writing file: sample_inet6_gce.gce
I0524 01:11:18.944844 131864350544512 aclgen.py:593] writing file: sample_srx.srx
I0524 01:11:18.945183 131864350544512 aclgen.py:593] writing file: sample_nftables.nft
I0524 01:11:18.945557 131864350544512 aclgen.py:593] writing file: sample_stateful_multitarget_simple.xml
I0524 01:11:18.946003 131864350544512 aclgen.py:593] writing file: sample_nsxv.nsx
I0524 01:11:18.946347 131864350544512 aclgen.py:593] writing file: sample_cloudarmor.gca
I0524 01:11:18.946757 131864350544512 aclgen.py:593] writing file: sample_nftables-mixed-icmp.nft
I0524 01:11:18.947118 131864350544512 aclgen.py:593] writing file: sample_juniper_loopback.jcl
I0524 01:11:18.947455 131864350544512 aclgen.py:593] writing file: sample_packetfilter.pf
I0524 01:11:18.947813 131864350544512 aclgen.py:593] writing file: sample_gcp_hf.gcphf
I0524 01:11:18.948232 131864350544512 aclgen.py:593] writing file: sample_k8s.yml
I0524 01:11:18.948606 131864350544512 aclgen.py:593] writing file: sample_nftables-dev.nft
I0524 01:11:18.949097 131864350544512 aclgen.py:593] writing file: sample_multitarget.jcl
I0524 01:11:18.949609 131864350544512 aclgen.py:593] writing file: sample_multitarget.evojcl
I0524 01:11:18.950057 131864350544512 aclgen.py:593] writing file: sample_speedway.ipt
I0524 01:11:18.950517 131864350544512 aclgen.py:593] writing file: sample_mixed_gcp_hf.gcphf
I0524 01:11:18.951089 131864350544512 aclgen.py:593] writing file: sample_nsxt.nsxt
I0524 01:11:18.951479 131864350544512 aclgen.py:593] writing file: sample_juniperevo_loopback.evojcl
I0524 01:11:18.963704 131864350544512 aclgen.py:593] writing file: sample_multitarget.msmpc
I0524 01:11:18.970462 131864350544512 aclgen.py:593] writing file: sample_multitarget.acl
I0524 01:11:18.970960 131864350544512 aclgen.py:593] writing file: sample_multitarget.asa
I0524 01:11:18.971390 131864350544512 aclgen.py:593] writing file: sample_multitarget.bacl
I0524 01:11:18.971883 131864350544512 aclgen.py:593] writing file: sample_multitarget.eacl
I0524 01:11:18.972230 131864350544512 aclgen.py:593] writing file: sample_multitarget.atp
I0524 01:11:18.972591 131864350544512 aclgen.py:593] writing file: sample_multitarget.ipt
I0524 01:11:18.973029 131864350544512 aclgen.py:593] writing file: sample_multitarget.nxacl
I0524 01:11:18.973448 131864350544512 aclgen.py:593] writing file: sample_multitarget.xacl
I0524 01:11:18.990920 131864350544512 aclgen.py:593] writing file: sample_msmpc.msmpc
I0524 01:11:19.000735 131864350544512 aclgen.py:593] writing file: sample_stateful_multitarget_complex.srx
I0524 01:11:19.002266 131864350544512 aclgen.py:593] writing file: sample_stateful_multitarget_complex.xml
I0524 01:11:19.003127 131864350544512 aclgen.py:675] done.
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter/capirca (master) $ ~/.local/bin/capirca --helpfull
bash: /home/codespace/.local/bin/capirca: No such file or directory
@TheProdigyLeague ➜ /workspaces/codespaces-jupyter/capirca (master) $ ^C
>>> from pprint import pprint
>>> from capirca.lib import naming
>>> defs = naming.Naming('./def')
>>> pprint(defs)
<capirca.lib.naming.Naming object at 0x7d74ee4bd970>
>>> dir(defs)
['GetIpParents', 'GetNet', 'GetNetAddr', 'GetNetChildren', 'GetNetParents', 'GetPortParents', 'GetService', <[...]> 'unseen_networks', 'unseen_services']
>>> from capirca.lib import policy
>>> conf = open('./policies/sample_paloalto.pol').read()

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
FileNotFoundError: [Errno 2] No such file or directory: './policies/sample_paloalto.pol'
>>> conf = open('/workspaces/codespaces-jupyter/capirca/policies/sample_paloalto.pol').read()
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
FileNotFoundError: [Errno 2] No such file or directory: '/workspaces/codespaces-jupyter/capirca/policies/sample_paloalto.pol'
>>> conf = open('capirca/policies/pol/sample_paloalto.pol').read()
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
FileNotFoundError: [Errno 2] No such file or directory: 'capirca/policies/pol/sample_paloalto.pol'
>>> conf = open('/workspaces/codespaces-jupyter/capirca/policies/pol/sample_paloalto.pol').read()
>>> pol = policy.ParsePolicy(conf, defs, optimize=True)
>>> print(pol)
>>> from capirca.lib import paloaltofw
>>> for header in pol.headers:
...     if 'paloalto' in header.platforms:
...             jcl = True
...     if jcl:
...             output = paloaltofw.PaloAltoFW(pol, 1)
...             print(output)
... 
<?xml version="1.0" ?>
<config version="8.1.0" urldb="paloaltonetworks">

...

Traceback (most recent call last):
  File "<stdin>", line 5, in <module>
  File "/workspaces/codespaces-jupyter/capirca/capirca/lib/paloaltofw.py", line 328, in __init__
    super().__init__(pol, exp_info)
  File "/workspaces/codespaces-jupyter/capirca/capirca/lib/aclgenerator.py", line 322, in __init__
    self._TranslatePolicy(pol, exp_info)
  File "/workspaces/codespaces-jupyter/capirca/capirca/lib/paloaltofw.py", line 488, in _TranslatePolicy
    raise UnsupportedFilterError(
capirca.lib.paloaltofw.UnsupportedFilterError: Term ping-gdns contains non tcp, udp protocols with pan-application: icmp: icmp
pan-application can only be used with protocols tcp, udp
>>>             output = paloaltofw.PaloAltoFW(pol, 1)
[1]+  Stopped                 python3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant
0