From: Florian Westphal Date: Thu, 6 Mar 2025 04:19:15 +0000 (+0100) Subject: doc: add mptcp to tcp option matching list X-Git-Tag: v1.1.2~62 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=19f8c4e8992ba3e77fc4a3537761c91034a72fc2;p=thirdparty%2Fnftables.git doc: add mptcp to tcp option matching list Suggested-by: Pablo Neira Ayuso Signed-off-by: Florian Westphal --- diff --git a/doc/payload-expression.txt b/doc/payload-expression.txt index 2a155aa8..ce0c6a23 100644 --- a/doc/payload-expression.txt +++ b/doc/payload-expression.txt @@ -729,13 +729,13 @@ nftables currently supports matching (finding) a given ipv6 extension header, TC *dst* {*nexthdr* | *hdrlength*} *mh* {*nexthdr* | *hdrlength* | *checksum* | *type*} *srh* {*flags* | *tag* | *sid* | *seg-left*} -*tcp option* {*eol* | *nop* | *maxseg* | *window* | *sack-perm* | *sack* | *sack0* | *sack1* | *sack2* | *sack3* | *timestamp*} 'tcp_option_field' +*tcp option* {*eol* | *nop* | *maxseg* | *window* | *sack-perm* | *sack* | *sack0* | *sack1* | *sack2* | *sack3* | *timestamp* | *mptcp* } 'tcp_option_field' *ip option* { lsrr | ra | rr | ssrr } 'ip_option_field' The following syntaxes are valid only in a relational expression with boolean type on right-hand side for checking header existence only: [verse] *exthdr* {*hbh* | *frag* | *rt* | *dst* | *mh*} -*tcp option* {*eol* | *nop* | *maxseg* | *window* | *sack-perm* | *sack* | *sack0* | *sack1* | *sack2* | *sack3* | *timestamp*} +*tcp option* {*eol* | *nop* | *maxseg* | *window* | *sack-perm* | *sack* | *sack0* | *sack1* | *sack2* | *sack3* | *timestamp* | *mptcp* } *ip option* { lsrr | ra | rr | ssrr } *dccp option* 'dccp_option_type' @@ -794,8 +794,13 @@ length, left, right |timestamp| TCP Timestamps | length, tsval, tsecr +|mptcp| +Multipath TCP | +subtype |============================ +Data types can be queried with 'nft describe tcp option *keyword* [ *fieldname* ]'. + TCP option matching also supports raw expression syntax to access arbitrary options: [verse] *tcp option*