Lines Matching refs:match
70 filtering (see `Connection state match support' below).
90 `CONNMARK' target and `connmark' match. Similar to the mark value
165 match and the nftables ct expression.
489 This option adds the "ct" expression that you can use to match
575 This option adds the "quota" expression that you can use to match
597 x_tables match/target extensions over the nf_tables
627 tristate "Netfilter nf_tables socket match support"
726 tristate 'nfmark target and match support'
729 This option adds the "MARK" target and "mark" match.
731 Netfilter mark matching allows you to match packets based on the
740 tristate 'ctmark target and match support'
745 This option adds the "CONNMARK" target and "connmark" match.
749 target and match, you can set and match on this mark.
752 tristate 'set target and match support'
756 This option adds the "SET" target and "set" match.
758 Using this target and match, you can add/delete and match
993 rates similar to TC estimators. The `rateest' match can be
994 used to match on the measured rates.
1064 will log every rule which match the packets as those traverse
1120 tristate '"addrtype" address type match support'
1123 This option allows you to match what routing thinks of an address,
1130 tristate '"bpf" match support'
1139 tristate '"control group" match support'
1144 Socket/process control group matching allows you to match locally
1149 tristate '"cluster" match support'
1155 load-balancing router/server/switch. Basically, this match returns
1157 all nodes see all packets and this match decides which node handles
1165 tristate '"comment" match support'
1168 This option adds a `comment' dummy-match, which allows you to put
1175 tristate '"connbytes" per-connection counter match support'
1179 This option adds a `connbytes' match, which allows you to match the
1186 tristate '"connlabel" match support'
1191 This match allows you to test and assign userspace-defined labels names
1199 tristate '"connlimit" match support'
1204 This match allows you to match against the number of parallel
1208 tristate '"connmark" connection mark match support'
1218 tristate '"conntrack" connection tracking match support'
1222 This is a general conntrack match module, a superset of the state match.
1231 tristate '"cpu" match support'
1234 CPU matching allows you to match packets based on the CPU
1240 tristate '"dccp" protocol match support'
1245 `dccp' match in order to match on DCCP source/destination ports
1252 tristate '"devgroup" match support'
1255 This options adds a `devgroup' match, which allows to match on the
1261 tristate '"dscp" and "tos" match support'
1264 This option adds a `DSCP' match, which allows you to match against
1269 It will also add a "tos" match, which allows you to match packets
1276 tristate '"ecn" match support'
1279 This option adds an "ECN" match, which allows you to match against
1285 tristate '"esp" match support'
1288 This match extension allows you to match a range of SPIs
1294 tristate '"hashlimit" match support'
1298 This option adds a `hashlimit' match.
1300 As opposed to `limit', this match dynamically creates a hash table
1309 tristate '"helper" match support'
1313 Helper matching allows you to match packets in dynamic connections
1319 tristate '"hl" hoplimit/TTL match support'
1322 HL matching allows you to match packets based on the hoplimit
1327 tristate '"ipcomp" match support'
1330 This match extension allows you to match a range of CPIs(16 bits)
1336 tristate '"iprange" address range match support'
1339 This option adds a "iprange" match, which allows you to match based on
1346 tristate '"ipvs" match support'
1351 This option allows you to match against IPVS properties of a packet.
1356 tristate '"l2tp" match support'
1360 This option adds an "L2TP" match, which allows you to match against
1366 tristate '"length" match support'
1369 This option allows you to match the length of a packet against a
1375 tristate '"limit" match support'
1385 tristate '"mac" address match support'
1388 MAC matching allows you to match packets based on the source
1394 tristate '"mark" match support'
1403 tristate '"multiport" Multiple port match support'
1406 Multiport matching allows you to match TCP or UDP packets based on
1408 match a single range of ports.
1413 tristate '"nfacct" match support'
1423 tristate '"osf" Passive OS fingerprint match'
1427 This option selects the Passive OS Fingerprinting match module
1428 that allows to passively match the remote operating system by
1437 tristate '"owner" match support'
1440 Socket owner matching allows you to match locally-generated packets
1445 tristate 'IPsec "policy" match support'
1449 Policy matching allows you to match packets based on the
1456 tristate '"physdev" match support'
1466 tristate '"pkttype" packet type match support'
1469 Packet type matching allows you to match a packet by
1478 tristate '"quota" match support'
1481 This option adds a `quota' match, which allows to match on a
1488 tristate '"quota2" match support'
1491 This option adds a `quota2' match, which allows to match on a
1511 tristate '"rateest" match support'
1515 This option adds a `rateest' match, which allows to match on the
1521 tristate '"realm" match support'
1525 This option adds a `realm' match, which allows you to use the realm
1528 This match pretty much resembles the CONFIG_NET_CLS_ROUTE4 option
1535 tristate '"recent" match support'
1538 This match is used for creating one or many lists of recently
1545 tristate '"sctp" protocol match support'
1550 `sctp' match in order to match on SCTP source/destination ports
1557 tristate '"socket" match support'
1567 This option adds a `socket' match, which can be used to match
1575 tristate '"state" match support'
1579 Connection state matching allows you to match packets based on their
1586 tristate '"statistic" match support'
1589 This option adds a `statistic' match, which allows you to match
1595 tristate '"string" match support'
1602 This option adds a `string' match, which allows you to look for
1608 tristate '"tcpmss" match support'
1611 This option adds a `tcpmss' match, which allows you to examine the
1618 tristate '"time" match support'
1621 This option adds a "time" match, which allows you to match based on
1632 tristate '"u32" match support'