summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_connbytes.man
diff options
context:
space:
mode:
authorYasuyuki KOZAKAI <yasuyuki@netfilter.org>2007-11-29 03:44:35 +0000
committerYasuyuki KOZAKAI <yasuyuki@netfilter.org>2007-11-29 03:44:35 +0000
commit26d3f05cc8a12f6a1377f6248155e196e661d63a (patch)
treebbbd3f0375397bbdaece537671de1a32dc9db0d1 /extensions/libipt_connbytes.man
parent65b2d1c5fa2981230a56a9166544d5fe0d4e2998 (diff)
Move libipt_connbytes.man to libxt_connbytes.man for ip6tables.8
Diffstat (limited to 'extensions/libipt_connbytes.man')
-rw-r--r--extensions/libipt_connbytes.man30
1 files changed, 0 insertions, 30 deletions
diff --git a/extensions/libipt_connbytes.man b/extensions/libipt_connbytes.man
deleted file mode 100644
index ce7b6659..00000000
--- a/extensions/libipt_connbytes.man
+++ /dev/null
@@ -1,30 +0,0 @@
-Match by how many bytes or packets a connection (or one of the two
-flows constituting the connection) have tranferred so far, or by
-average bytes per packet.
-
-The counters are 64bit and are thus not expected to overflow ;)
-
-The primary use is to detect long-lived downloads and mark them to be
-scheduled using a lower priority band in traffic control.
-
-The transfered bytes per connection can also be viewed through
-/proc/net/ip_conntrack and accessed via ctnetlink
-.TP
-[\fB!\fR]\fB --connbytes \fIfrom\fB:\fR[\fIto\fR]
-match packets from a connection whose packets/bytes/average packet
-size is more than FROM and less than TO bytes/packets. if TO is
-omitted only FROM check is done. "!" is used to match packets not
-falling in the range.
-.TP
-\fB--connbytes-dir\fR [\fBoriginal\fR|\fBreply\fR|\fBboth\fR]
-which packets to consider
-.TP
-\fB--connbytes-mode\fR [\fBpackets\fR|\fBbytes\fR|\fBavgpkt\fR]
-whether to check the amount of packets, number of bytes transferred or
-the average size (in bytes) of all packets received so far. Note that
-when "both" is used together with "avgpkt", and data is going (mainly)
-only in one direction (for example HTTP), the average packet size will
-be about half of the actual data packets.
-.TP
-Example:
-iptables .. -m connbytes --connbytes 10000:100000 --connbytes-dir both --connbytes-mode bytes ...