Lines Matching full:match
70 filtering (see `Connection state match support' below).
90 `CONNMARK' target and `connmark' match. Similar to the mark value
165 match and the nftables ct expression.
482 This option adds the "ct" expression that you can use to match
568 This option adds the "quota" expression that you can use to match
590 x_tables match/target extensions over the nf_tables
620 tristate "Netfilter nf_tables socket match support"
719 tristate 'nfmark target and match support'
722 This option adds the "MARK" target and "mark" match.
724 Netfilter mark matching allows you to match packets based on the
733 tristate 'ctmark target and match support'
738 This option adds the "CONNMARK" target and "connmark" match.
742 target and match, you can set and match on this mark.
745 tristate 'set target and match support'
749 This option adds the "SET" target and "set" match.
751 Using this target and match, you can add/delete and match
986 rates similar to TC estimators. The `rateest' match can be
987 used to match on the measured rates.
1057 will log every rule which match the packets as those traverse
1113 tristate '"addrtype" address type match support'
1116 This option allows you to match what routing thinks of an address,
1123 tristate '"bpf" match support'
1132 tristate '"control group" match support'
1137 Socket/process control group matching allows you to match locally
1142 tristate '"cluster" match support'
1148 load-balancing router/server/switch. Basically, this match returns
1150 all nodes see all packets and this match decides which node handles
1158 tristate '"comment" match support'
1161 This option adds a `comment' dummy-match, which allows you to put
1168 tristate '"connbytes" per-connection counter match support'
1172 This option adds a `connbytes' match, which allows you to match the
1179 tristate '"connlabel" match support'
1184 This match allows you to test and assign userspace-defined labels names
1192 tristate '"connlimit" match support'
1197 This match allows you to match against the number of parallel
1201 tristate '"connmark" connection mark match support'
1211 tristate '"conntrack" connection tracking match support'
1215 This is a general conntrack match module, a superset of the state match.
1224 tristate '"cpu" match support'
1227 CPU matching allows you to match packets based on the CPU
1233 tristate '"dccp" protocol match support'
1238 `dccp' match in order to match on DCCP source/destination ports
1245 tristate '"devgroup" match support'
1248 This options adds a `devgroup' match, which allows to match on the
1254 tristate '"dscp" and "tos" match support'
1257 This option adds a `DSCP' match, which allows you to match against
1262 It will also add a "tos" match, which allows you to match packets
1269 tristate '"ecn" match support'
1272 This option adds an "ECN" match, which allows you to match against
1278 tristate '"esp" match support'
1281 This match extension allows you to match a range of SPIs
1287 tristate '"hashlimit" match support'
1291 This option adds a `hashlimit' match.
1293 As opposed to `limit', this match dynamically creates a hash table
1302 tristate '"helper" match support'
1306 Helper matching allows you to match packets in dynamic connections
1312 tristate '"hl" hoplimit/TTL match support'
1315 HL matching allows you to match packets based on the hoplimit
1320 tristate '"ipcomp" match support'
1323 This match extension allows you to match a range of CPIs(16 bits)
1329 tristate '"iprange" address range match support'
1332 This option adds a "iprange" match, which allows you to match based on
1339 tristate '"ipvs" match support'
1344 This option allows you to match against IPVS properties of a packet.
1349 tristate '"l2tp" match support'
1353 This option adds an "L2TP" match, which allows you to match against
1359 tristate '"length" match support'
1362 This option allows you to match the length of a packet against a
1368 tristate '"limit" match support'
1378 tristate '"mac" address match support'
1381 MAC matching allows you to match packets based on the source
1387 tristate '"mark" match support'
1396 tristate '"multiport" Multiple port match support'
1399 Multiport matching allows you to match TCP or UDP packets based on
1401 match a single range of ports.
1406 tristate '"nfacct" match support'
1416 tristate '"osf" Passive OS fingerprint match'
1420 This option selects the Passive OS Fingerprinting match module
1421 that allows to passively match the remote operating system by
1430 tristate '"owner" match support'
1433 Socket owner matching allows you to match locally-generated packets
1438 tristate 'IPsec "policy" match support'
1442 Policy matching allows you to match packets based on the
1449 tristate '"physdev" match support'
1459 tristate '"pkttype" packet type match support'
1462 Packet type matching allows you to match a packet by
1471 tristate '"quota" match support'
1474 This option adds a `quota' match, which allows to match on a
1481 tristate '"rateest" match support'
1485 This option adds a `rateest' match, which allows to match on the
1491 tristate '"realm" match support'
1495 This option adds a `realm' match, which allows you to use the realm
1498 This match pretty much resembles the CONFIG_NET_CLS_ROUTE4 option
1505 tristate '"recent" match support'
1508 This match is used for creating one or many lists of recently
1515 tristate '"sctp" protocol match support'
1520 `sctp' match in order to match on SCTP source/destination ports
1527 tristate '"socket" match support'
1537 This option adds a `socket' match, which can be used to match
1545 tristate '"state" match support'
1549 Connection state matching allows you to match packets based on their
1556 tristate '"statistic" match support'
1559 This option adds a `statistic' match, which allows you to match
1565 tristate '"string" match support'
1572 This option adds a `string' match, which allows you to look for
1578 tristate '"tcpmss" match support'
1581 This option adds a `tcpmss' match, which allows you to examine the
1588 tristate '"time" match support'
1591 This option adds a "time" match, which allows you to match based on
1602 tristate '"u32" match support'