From: Florian Westphal Date: Mon, 4 Jan 2016 18:47:15 +0000 (+0100) Subject: doc: update meta and ct expression keyword lists X-Git-Tag: v0.6~166 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b99ec85e32947e337681aef8a29eae1c4c10f14e;p=thirdparty%2Fnftables.git doc: update meta and ct expression keyword lists Signed-off-by: Florian Westphal Acked-by: Pablo Neira Ayuso --- diff --git a/doc/nft.xml b/doc/nft.xml index d51876cd..dbc9cd5e 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -982,6 +982,13 @@ filter output ip6 daddr ::1 skgid nftrace rtclassid + ibriport + obriport + pkttype + cpu + iifgroup + oifgroup + cgroup @@ -1074,6 +1081,41 @@ filter output ip6 daddr ::1 Routing realm realm + + ibriport + Input bridge interface name + string + + + obriport + Output bridge interface name + string + + + pkttype + packet type + pkt_type + + + cpu + cpu number processing the packet + integer (32 bits) + + + iifgroup + incoming device group + devgroup_type + + + oifgroup + outgoing device group + devgroup_type + + + cgroup + control group id + integer (32 bits) + @@ -1131,6 +1173,20 @@ filter output ip6 daddr ::1 or as symbolic name defined in /etc/iproute2/rt_realms. + + devgroup_type + + Device group (32 bit number). Can be specified numerically + or as symbolic name defined in /etc/iproute2/group. + + + + pkt_type + + Packet type: Unicast (addressed to local host), + Broadcast (to all), Multicast (to group). + + @@ -1884,6 +1940,7 @@ filter output oif eth0 mark expiration helper + label l3proto saddr daddr @@ -1938,6 +1995,11 @@ filter output oif eth0 Helper associated with the connection string + + label + Connection tracking label + ct_label + l3proto Layer 3 protocol of the connection