summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_state.man
diff options
context:
space:
mode:
Diffstat (limited to 'extensions/libipt_state.man')
-rw-r--r--extensions/libipt_state.man21
1 files changed, 21 insertions, 0 deletions
diff --git a/extensions/libipt_state.man b/extensions/libipt_state.man
new file mode 100644
index 00000000..71078680
--- /dev/null
+++ b/extensions/libipt_state.man
@@ -0,0 +1,21 @@
+This module, when combined with connection tracking, allows access to
+the connection tracking state for this packet.
+.TP
+.BI "--state " "state"
+Where state is a comma separated list of the connection states to
+match. Possible states are
+.B INVALID
+meaning that the packet could not be identified for some reason which
+includes running out of memory and ICMP errors which don't correspond to any
+known connection,
+.B ESTABLISHED
+meaning that the packet is associated with a connection which has seen
+packets in both directions,
+.B NEW
+meaning that the packet has started a new connection, or otherwise
+associated with a connection which has not seen packets in both
+directions, and
+.B RELATED
+meaning that the packet is starting a new connection, but is
+associated with an existing connection, such as an FTP data transfer,
+or an ICMP error.