// (e.g. LoadBalanced Service packets, etc) that need to be authenticated/captured/proxied.
	//
	// We want to do the same thing in ambient but can't rely on podSpec injection. So, do effectively the same thing,
	// but with iptables rules - use `--socket-exists` as a proxy for "is this a forwarded packet" vs "is this originating from

            - NET_ADMIN # Required for TPROXY and setsockopt
            - SYS_ADMIN # Required for `setns` - doing things in other netns
            - NET_RAW # Required for RAW/PACKET sockets, TPROXY
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: false
          runAsUser: 0
{{- if .Values.seLinuxOptions }}
          seLinuxOptions:

     *
     * @see jcifs.util.transport.Response#isError()
     */
    @Override
    public final boolean isError () {
        return this.error;
    }


    /**
     * @return whether the packet has been signed.
     */
    public boolean isSigned () {
        return ( getFlags() & SMB2_FLAGS_SIGNED ) != 0;
    }


    /**
     * {@inheritDoc}
     *

 */

package jcifs.smb1.netbios;

import java.io.IOException;
import java.io.InputStream;

public abstract class SessionServicePacket { 

    // session service packet types 
    static final int SESSION_MESSAGE = 0x00; 
    static final int SESSION_REQUEST = 0x81; 
    public static final int POSITIVE_SESSION_RESPONSE = 0x82; 
    public static final int NEGATIVE_SESSION_RESPONSE = 0x83; 

 * permits per second:
 *
 * <pre>{@code
 * final RateLimiter rateLimiter = RateLimiter.create(5000.0); // rate = 5000 permits per second
 * void submitPacket(byte[] packet) {
 *   rateLimiter.acquire(packet.length);
 *   networkService.send(packet);
 * }
 * }</pre>
 *
 * <p>It is important to note that the number of permits requested <i>never</i> affects the

 */

package jcifs.netbios;


import java.io.IOException;
import java.io.InputStream;


/**
 *
 */
public abstract class SessionServicePacket {

    // session service packet types
    static final int SESSION_MESSAGE = 0x00;
    static final int SESSION_REQUEST = 0x81;

    /**
     * 
     */
    public static final int POSITIVE_SESSION_RESPONSE = 0x82;

    /**
     * 

- sends UDS events to ztunnel via a socket whenever a pod is enabled for ambient mesh (whether from CNI plugin or node watcher), instructing ztunnel to create the "tube" socket.

The ambient CNI agent is the only place where ambient network config and pod redirection machinery happens.

pkg syscall (linux-386), const PACKET_MR_MULTICAST ideal-int
pkg syscall (linux-386), const PACKET_MR_PROMISC ideal-int
pkg syscall (linux-386), const PACKET_MULTICAST ideal-int
pkg syscall (linux-386), const PACKET_OTHERHOST ideal-int
pkg syscall (linux-386), const PACKET_OUTGOING ideal-int
pkg syscall (linux-386), const PACKET_RECV_OUTPUT ideal-int
pkg syscall (linux-386), const PACKET_RX_RING ideal-int

                  TTL for an incoming BFD control packet.'
                format: int32
                maximum: 254
                minimum: 1
                type: integer
              passiveMode:
                description: 'Mark session as passive: a passive session will not
                  attempt to start the connection and will wait for control packets
                  from peer before it begins replying.'

        return HEADER_LENGTH;
    }
    boolean isResponse() {
        return ( flags & FLAGS_RESPONSE ) == FLAGS_RESPONSE;
    }

    /* 
     * For this packet deconstruction technique to work for
     * other networking protocols the InputStream may need
     * to be passed to the readXxxWireFormat methods. This is
     * actually purer. However, in the case of smb we know the