Matching packet metainformation - Revision history

Laforge: list pkttype options

2024-03-28T14:33:53Z

list pkttype options

← Older revision		Revision as of 14:33, 28 March 2024
Line 17:		Line 17:
	\| ''pkttype''		\| ''pkttype''
	\| [[Setting_packet_metainformation \|Y]]		\| [[Setting_packet_metainformation \|Y]]
	\| packet type		\| packet type (''unicast'', ''broadcast'', ''multicast'', ''other'')
	\| pkt_type		\| pkt_type
	\|		\|
Line 50:		Line 50:

	\|}		\|}


	= Matching by interface =		= Matching by interface =

2021-04-16T22:25:17Z

Updated link to matching routing information nexthop and fib.

← Older revision		Revision as of 22:25, 16 April 2021
Line 50:		Line 50:

	\|}		\|}


	= Matching by interface =		= Matching by interface =
Line 241:		Line 242:
	</source>		</source>

	See also: [[~~Routing_information~~\|''nexthop'' and ''fib'' selectors]]		See also: [[Matching routing information\|''nexthop'' and ''fib'' selectors]]


	= Matching by socket UID / GID =		= Matching by socket UID / GID =
Line 305:		Line 307:

	'''Important''': Beware if you test this with ''ping'', it is usually installed with suid so that traffic will match the root user (uid=0).		'''Important''': Beware if you test this with ''ping'', it is usually installed with suid so that traffic will match the root user (uid=0).


	= Matching by time =		= Matching by time =
Line 343:		Line 346:

	\|}		\|}


	= Matching by security selectors =		= Matching by security selectors =
Line 384:		Line 388:

	\|}		\|}


	= Matching by miscellaneous selectors =		= Matching by miscellaneous selectors =

2021-02-07T17:21:43Z

Matching by time: specify data types more precisely

← Older revision		Revision as of 17:21, 7 February 2021
Line 321:		Line 321:
	\|		\|
	\| timestamp of packet reception		\| timestamp of packet reception
	\| ~~integer (32 bit) or string~~		\| time
	\| Can specify as:		\| Can specify as:
	* integer: ns since epoch, or		* integer: ns since epoch, or
Line 330:		Line 330:
	\|		\|
	\| day of week		\| day of week
	\| ~~integer (32 bit) or string~~		\| day
	\| Can specify as:		\| Can specify as:
	* integer: 0 = Sunday to 6 = Saturday, or		* integer: 0 = Sunday to 6 = Saturday, or
Line 339:		Line 339:
	\|		\|
	\| hour of day		\| hour of day
	\| ~~string~~		\| hour
	\| 24-hour "HH:MM:SS", with seconds optional.		\| 24-hour "HH:MM:SS", with seconds optional.

2021-02-07T17:14:10Z

Combined mark & routing sections

@@ Line 186: / Line 186: @@
 </source>
-= Matching by packet mark =
+= Matching by packet mark, routing class and realm =
 {| class="wikitable"
-!colspan="5"|''meta'' Packet Mark Selector
+!colspan="5"|''meta'' Packet Mark & Routing Selectors
 |- style="vertical-align:bottom;"
 ! Keyword
@@ Line 203: / Line 203: @@
 | mark
+|
 |}
@@ Line 211: / Line 229: @@
 nft add rule filter output meta mark 123 counter
 </source>
 = Matching by socket UID / GID =
@@ Line 274: / Line 305: @@
 '''Important''': Beware if you test this with ''ping'', it is usually installed with suid so that traffic will match the root user (uid=0).
 = Matching by time =

2021-02-07T17:09:25Z

Matching by interface: Fix types of iifkind, oifkind

2021-02-07T16:56:55Z

Matching by time: Add details of specifying time values, from man page.

← Older revision		Revision as of 16:56, 7 February 2021
Line 335:		Line 335:
	\| timestamp of packet reception		\| timestamp of packet reception
	\| integer (32 bit) or string		\| integer (32 bit) or string
	\|		\| Can specify as:
			* integer: ns since epoch, or
			* string: date in ISO format.

	\|- style="vertical-align:top;"		\|- style="vertical-align:top;"
Line 342:		Line 344:
	\| day of week		\| day of week
	\| integer (32 bit) or string		\| integer (32 bit) or string
	\|		\| Can specify as:
			* integer: 0 = Sunday to 6 = Saturday, or
			* case-insensitive string: "Monday", "tuesday", etc. Unique abbreviations also work: "fri", "Sat".

	\|- style="vertical-align:top;"		\|- style="vertical-align:top;"
Line 349:		Line 353:
	\| hour of day		\| hour of day
	\| string		\| string
	\|		\| 24-hour "HH:MM:SS", with seconds optional.

	\|}		\|}

2021-02-07T16:42:55Z

Matching by interface

2021-02-07T13:23:51Z

Matching by security selectors

← Older revision		Revision as of 13:23, 7 February 2021
Line 382:		Line 382:
	\| [[Setting_packet_metainformation \|Y]]		\| [[Setting_packet_metainformation \|Y]]
	\| packet secmark		\| packet secmark
	\|		\| integer (32 bit)
	\|		\|

2021-02-07T13:22:30Z

Matching by miscellaneous selectors

← Older revision		Revision as of 13:22, 7 February 2021
Line 411:		Line 411:
	\| [[Setting_packet_metainformation \|Y]]		\| [[Setting_packet_metainformation \|Y]]
	\| [[Ruleset_debug/tracing\|nftrace debugging]] bit		\| [[Ruleset_debug/tracing\|nftrace debugging]] bit
	\|		\| boolean (1 bit)
	\|		\|

2021-02-07T13:20:49Z

Matching by security selectors