Document explicitly that protocol is not stored in bitmap:port

diff --git a/lib/ipset_bitmap_port.c b/lib/ipset_bitmap_port.c
index 72224a7db520fb86e5cee19efcb7fd6f9f171ea5..33f8e6ca62c6836474e13accd52373dac773dcf1 100644 (file)
--- a/lib/ipset_bitmap_port.c
+++ b/lib/ipset_bitmap_port.c
@@ -69,7 +69,7 @@ static struct ipset_type ipset_bitmap_port0 = {
        },
        .usage = "where PORT, FROM and TO are port numbers or port names from /etc/services.\n"
                 "      PROTO is only needed if a service name is used and it does not exist\n"
-                "      as a TCP service; it isn't used otherwise with the bitmap.",
+                "      as a TCP service; just the resolved service numer is stored in the set.",
        .description = "Initial revision",
 };
 
@@ -136,7 +136,7 @@ static struct ipset_type ipset_bitmap_port1 = {
        },
        .usage = "where PORT, FROM and TO are port numbers or port names from /etc/services.\n"
                 "      PROTO is only needed if a service name is used and it does not exist\n"
-                "      as a TCP service; it isn't used otherwise with the bitmap.",
+                "      as a TCP service; just the resolved service numer is stored in the set.",
        .description = "counters support",
 };
 
@@ -205,7 +205,7 @@ static struct ipset_type ipset_bitmap_port2 = {
        },
        .usage = "where PORT, FROM and TO are port numbers or port names from /etc/services.\n"
                 "      PROTO is only needed if a service name is used and it does not exist\n"
-                "      as a TCP service; it isn't used otherwise with the bitmap.",
+                "      as a TCP service; just the resolved service numer is stored in the set.",
        .description = "comment support",
 };
 
@@ -278,7 +278,7 @@ static struct ipset_type ipset_bitmap_port3 = {
        },
        .usage = "where PORT, FROM and TO are port numbers or port names from /etc/services.\n"
                 "      PROTO is only needed if a service name is used and it does not exist\n"
-                "      as a TCP service; it isn't used otherwise with the bitmap.",
+                "      as a TCP service; just the resolved service numer is stored in the set.",
        .description = "skbinfo support",
 };
 

diff --git a/src/ipset.8 b/src/ipset.8
index f1a1368e7680672a756d0fbdad704f24bdc3bf7b..7787d7997ddc8591ff184e8c4f377536fd902687 100644 (file)
--- a/src/ipset.8
+++ b/src/ipset.8
@@ -496,8 +496,9 @@ Create the set from the specified inclusive port range.
 The \fBset\fR match and \fBSET\fR target netfilter kernel modules interpret
 the stored numbers as TCP or UDP port numbers.
 .PP
-\fBproto\fR only needs to be specified if a service name is used,
-and that name does not exist as a TCP service.
+\fBproto\fR only needs to be specified if a service name is used
+and that name does not exist as a TCP service. The protocol is never stored
+in the set, just the port number of the service.
 .PP
 Examples:
 .IP