diff options
| author | Denis Ovsienko <denis@ovsienko.info> | 2022-06-19 22:49:59 +0100 |
|---|---|---|
| committer | Guy Harris <gharris@sonic.net> | 2022-07-13 22:06:31 -0700 |
| commit | 20a3cdd4b178ef0f4a453308ec5c5375d11c6c46 (patch) | |
| tree | 0733e1c557029923fd8b981b7aa2b0ca66507a91 /pcap-filter.manmisc.in | |
| parent | 67cc832936bba3ee30a8455def5c69fb1d536a1a (diff) | |
| download | libpcap-20a3cdd4b178ef0f4a453308ec5c5375d11c6c46.tar.gz | |
Clarify "protocol" in pcap-filter(7) further. [skip ci]
This should progress GH #326 a little bit more.
(cherry picked from commit a99eaca8db38a0cac748913dd78e8402147d8194)
Diffstat (limited to 'pcap-filter.manmisc.in')
| -rw-r--r-- | pcap-filter.manmisc.in | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/pcap-filter.manmisc.in b/pcap-filter.manmisc.in index c3a91789..b32f1065 100644 --- a/pcap-filter.manmisc.in +++ b/pcap-filter.manmisc.in @@ -321,6 +321,7 @@ Abbreviation for: .in -.5i .IP "\fBip6 proto \fIprotocol\fR" True if the packet is an IPv6 packet of protocol type \fIprotocol\fP. +(See `\fBip proto\fP' above for the meaning of \fIprotocol\fR.) Note that the IPv6 variant of ICMP uses a different protocol number, named .B \%ipv6-icmp in AIX, FreeBSD, illumos, Linux, macOS, NetBSD, OpenBSD, Solaris and Windows. @@ -334,7 +335,8 @@ Abbreviation for: .in -.5i .IP "\fBproto \fIprotocol\fR" True if the packet is an IPv4 or IPv6 packet of protocol type -\fIprotocol\fP. Note that this primitive does not chase the protocol +\fIprotocol\fP. (See `\fBip proto\fP' above for the meaning of +\fIprotocol\fP.) Note that this primitive does not chase the protocol header chain. .IP "\fBah\fR, \fBesp\fR, \fBpim\fR, \fBsctp\fR, \fBtcp\fR, \fBudp\fR" Abbreviations for: @@ -348,6 +350,7 @@ where \fIprotocol\fR is one of the above protocols. True if the packet is IPv6 packet, and contains protocol header with type \fIprotocol\fR in its protocol header chain. +(See `\fBip proto\fP' above for the meaning of \fIprotocol\fP.) For example, .in +.5i .nf @@ -364,9 +367,11 @@ filter engines in the kernel, so this can be somewhat slow, and may cause more packets to be dropped. .IP "\fBip protochain \fIprotocol\fR" Equivalent to \fBip6 protochain \fIprotocol\fR, but this is for IPv4. +(See `\fBip proto\fP' above for the meaning of \fIprotocol\fP.) .IP "\fBprotochain \fIprotocol\fR" True if the packet is an IPv4 or IPv6 packet of protocol type -\fIprotocol\fP. Note that this primitive chases the protocol +\fIprotocol\fP. (See `\fBip proto\fP' above for the meaning of +\fIprotocol\fP.) Note that this primitive chases the protocol header chain. .IP "\fBether broadcast\fR" True if the packet is an Ethernet broadcast packet. |