Replace deprecated IO::Socket::INET6 with IO::Socket::IP.

Remove echo headlines.

Test should also run if there is no obj directory. Name regress
targets consistently with a run- prefix.

To avoid SYN retransmit, kill local tcp pf state that will be reused.
This makes the state reuse tests faster and more reliable.

As the divert-to pf state is not connected, it is not linked to the
incpb and so not removed when the socket is closed. Packets matching
reply and reply-to states are linked to the sockets immediate

As the divert-to pf state is not connected, it is not linked to the
incpb and so not removed when the socket is closed. Packets matching
reply and reply-to states are linked to the sockets immediately.
So these states must go away when the socket is closed. Check this
with the output of "pfctl -s states" after running the Perl scripts.

show more ...

When setting KTRACE in the environment, client and server write
ktrace files. This simplifies debugging as system calls can be
inspected with kdump.

The divert-packet socket option IP_DIVERTFL, IPPROTO_DIVERT_RESP,
IPPROTO_DIVERT_INIT feature is gone. Remove the corresponding
tests.

Run divert-packet tests also for IPv6.

Add tests for pf divert-packet. Currently UDP packets are tested
with in and out rules. A single packet, the initial packet or the
response packet are diverted and reinjected.

Test multiple combinations of divert connections. The socket cleanup
of the first connection must remove the pf state so that the second
connection can succeed. Disable two raw IP tests that do not

Test multiple combinations of divert connections. The socket cleanup
of the first connection must remove the pf state so that the second
connection can succeed. Disable two raw IP tests that do not work
with the current implementation in the kernel.

show more ...

Mark pf states created by this regress test with a label. Remove
all such states before basic testing to make sure that these subtests
are independent.

Print SKIPPED if a regress test cannot be executed for some reason.
This allows to identify such tests by looking at their output.

Add more and deeper tests for pf divert-reply rules. Especially
the combination of sending and receiving multiple packets over one
socket is tested for UDP, raw IP and ICMP.

Make the perl modules consistent for the multiple regression tests.
This includes coding style, better error messages and variable
naming.

Use a saner and consistent address layout for my network tests that
run over 4 machines. Add a check-setup target to verify that
interface addresses and routes are properly set up.

Make the test output easier to read by splitting the test cases
with an empty line and a header line.

Fix the tests for the pf divert state and socket reuse.

Grep pf state table on remote machine to find state reuse problems.

Add divert tests that reuse protocol and port. They show what
happens when we close the socket but the divert state remains. If
a new socket uses the same protocol and port, it will use the old
dan

Add divert tests that reuse protocol and port. They show what
happens when we close the socket but the divert state remains. If
a new socket uses the same protocol and port, it will use the old
dangling state. Without searching for the correct rule, the divert-to
will fail. There are real life corner cases where this occurred.

show more ...

Add a check-setup target. This allows to find setup errors more
easily. A remote machine with correct addresses, routes and pf
rules is needed for the test.

Check wether the required perl packages are installed and that the
environment for the remote testing machine is set up. If not, print
a message and skip the regression tests.

Do not write my IP addresses into the pf_divert Makefile, the tester
has to fill in his own addresses. Link the pf_divert regression
tests to the build.

Add tests for raw IP divert. Set effective user ID to 0 only during
privileged operations for raw sockets and bind any.

Add a regression test suite for the pf divert-to and divert-reply
feature. It requires two machines, the local host is running the
regression test, the remote host gets pf divert rules installed.
Th

Add a regression test suite for the pf divert-to and divert-reply
feature. It requires two machines, the local host is running the
regression test, the remote host gets pf divert rules installed.
The diverted TCP connections are running between these hosts in
both directions. The remote host is controlled via ssh.

show more ...