Add peerCIDR flow filtering support (#147)

Signed-off-by: Mohamed Mahmoud <mmahmoud@redhat.com>

Author: msherif1234

res/flow-capture.yml

@@ -53,7 +53,7 @@ spec:
                 "destination_port": 0, "port": 0, "source_port_range": "",
                 "source_ports": "", "destination_port_range": "",
                 "destination_ports": "", "port_range": "", "ports": "",
-                "icmp_type": 0, "icmp_code": 0, "peer_ip": "", "action": "Accept",
+                "icmp_type": 0, "icmp_code": 0, "peer_ip": "", "peer_cidr": "", action": "Accept",
                 "tcp_flags": "", "drops": false } 
               ]
           - name: EXPORT

res/packet-capture.yml

@@ -39,7 +39,7 @@ spec:
                 "destination_port": 0, "port": 0, "source_port_range": "",
                 "source_ports": "", "destination_port_range": "",
                 "destination_ports": "", "port_range": "", "ports": "",
-                "icmp_type": 0, "icmp_code": 0, "peer_ip": "", "action": "Accept",
+                "icmp_type": 0, "icmp_code": 0, "peer_ip": "", "peer_cidr": "", "action": "Accept",
                 "tcp_flags": "", "drops": false } 
               ]
           - name: EXPORT

scripts/functions.sh

@@ -372,6 +372,7 @@ function filters_usage {
   echo "          --icmp_type:              filter ICMP type                           (default: n/a)"
   echo "          --icmp_code:              filter ICMP code                           (default: n/a)"
   echo "          --peer_ip:                filter peer IP                             (default: n/a)"
+  echo "          --peer_cidr:              filter peer CIDR                           (default: n/a)"
   echo "          --drops:                  filter flows with only dropped packets     (default: false)"
   echo "          --regexes:                filter flows using regex                   (default: n/a)"
 }
@@ -516,6 +517,9 @@ function edit_manifest() {
   "filter_peer_ip")
     "$YQ_BIN" e --inplace " .spec.template.spec.containers[0].env[] |= select(.name == \"FLOW_FILTER_RULES\").value |=(fromjson | map(.peer_ip = \"$2\")| tostring)" "$3"
     ;;
+  "filter_peer_cidr")
+    "$YQ_BIN" e --inplace " .spec.template.spec.containers[0].env[] |= select(.name == \"FLOW_FILTER_RULES\").value |=(fromjson | map(.peer_cidr = \"$2\")| tostring)" "$3"
+    ;;
   "filter_action")
     "$YQ_BIN" e --inplace " .spec.template.spec.containers[0].env[] |= select(.name == \"FLOW_FILTER_RULES\").value |=(fromjson | map(.action = \"$2\")| tostring)" "$3"
     ;;
@@ -730,6 +734,9 @@ function check_args_and_apply() {
     --peer_ip) # Peer IP
       edit_manifest "filter_peer_ip" "$value" "$2"
       ;;
+    --peer_cidr) # Peer CIDR
+      edit_manifest "filter_peer_cidr" "$value" "$2"
+      ;;
     --action) # Filter action
       if [[ "$value" == "Accept" || "$value" == "Reject" ]]; then
         edit_manifest "filter_action" "$value" "$2"