INVALID state incorrectly explained (Cedric Blancher, Maciej Soltysiak)

diff --git a/iptables.8 b/iptables.8
index f73ff4628a867bfd439fbd2c47ba436ce88d207f..a166a8be6345cfb8e500587a6e86f08030c601eb 100644 (file)
--- a/iptables.8
+++ b/iptables.8
@@ -610,7 +610,9 @@ the connection tracking state for this packet.
 Where state is a comma separated list of the connection states to
 match.  Possible states are
 .B INVALID
-meaning that the packet is associated with no known connection,
+meaning that the packet could not be identified for some reason which
+includes running out of memory and ICMP errors which don't correspond to any
+known connection,
 .B ESTABLISHED
 meaning that the packet is associated with a connection which has seen
 packets in both directions,