From fb04310517f96741003a971eaf9cb799f52b62a2 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Thu, 16 Mar 2017 13:43:21 +0100 Subject: doc: Describe ICMP(v6) expression and types This adds a description of the icmp and icmpv6 expressions (to match various ICMP header fields) as well as the icmp and icmpv6 type types (yay) which are used for ICMP(v6) type field. Signed-off-by: Phil Sutter Signed-off-by: Pablo Neira Ayuso --- doc/nft.xml | 380 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 380 insertions(+) (limited to 'doc/nft.xml') diff --git a/doc/nft.xml b/doc/nft.xml index b3e3d9e7..d4121846 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -1504,6 +1504,254 @@ filter input tcp option timestamp exists + + ICMP Type type + + + + + + + + + + Name + Keyword + Size + Base type + + + + + ICMP Type + icmp_type + 8 bit + integer + + + +
+ + + The ICMP Type type is used to conveniently specify the ICMP header's type field. + + + The following keywords may be used when specifying the ICMP type: + + + + + + + Keyword + Value + + + + + echo-reply + 0 + + + destination-unreachable + 3 + + + source-quench + 4 + + + redirect + 5 + + + echo-request + 8 + + + router-advertisement + 9 + + + router-solicitation + 10 + + + time-exceeded + 11 + + + parameter-problem + 12 + + + timestamp-request + 13 + + + timestamp-reply + 14 + + + info-request + 15 + + + info-reply + 16 + + + address-mask-request + 17 + + + address-mask-reply + 18 + + + +
+ + + ICMP Type specification + +# match ping packets +filter output icmp type { echo-request, echo-reply } + + + + + ICMPv6 Type type + + + + + + + + + + Name + Keyword + Size + Base type + + + + + ICMPv6 Type + icmpv6_type + 8 bit + integer + + + +
+ + + The ICMPv6 Type type is used to conveniently specify the ICMPv6 header's type field. + + + The following keywords may be used when specifying the ICMPv6 type: + + + + + + + Keyword + Value + + + + + destination-unreachable + 1 + + + packet-too-big + 2 + + + time-exceeded + 3 + + + parameter-problem + 4 + + + echo-request + 128 + + + echo-reply + 129 + + + mld-listener-query + 130 + + + mld-listener-report + 131 + + + mld-listener-done + 132 + + + mld-listener-reduction + 132 + + + nd-router-solicit + 133 + + + nd-router-advert + 134 + + + nd-neighbor-solicit + 135 + + + nd-neighbor-advert + 136 + + + nd-redirect + 137 + + + router-renumbering + 138 + + + ind-neighbor-solicit + 141 + + + ind-neighbor-advert + 142 + + + mld2-listener-report + 143 + + + +
+ + + ICMPv6 Type specification + +# match ICMPv6 ping packets +filter output icmpv6 type { echo-request, echo-reply } + + + @@ -2170,6 +2418,70 @@ inet filter meta nfproto ipv6 output rt nexthop fd00::1 + + ICMP header expression + + + icmp + ICMP header field + + + + + ICMP header expression + + + + + + + Keyword + Description + Type + + + + + type + ICMP type field + icmp_type + + + code + ICMP code field + integer (8 bit) + + + checksum + ICMP checksum field + integer (16 bit) + + + id + ID of echo request/response + integer (16 bit) + + + sequence + sequence number of echo request/response + integer (16 bit) + + + gateway + gateway of redirects + integer (32 bit) + + + mtu + MTU of path MTU discovery + integer (16 bit) + + + +
+ + + IPv6 header expression @@ -2244,6 +2556,74 @@ inet filter meta nfproto ipv6 output rt nexthop fd00::1 + + ICMPv6 header expression + + + icmpv6 + ICMPv6 header field + + + + + ICMPv6 header expression + + + + + + + Keyword + Description + Type + + + + + type + ICMPv6 type field + icmpv6_type + + + code + ICMPv6 code field + integer (8 bit) + + + checksum + ICMPv6 checksum field + integer (16 bit) + + + parameter-problem + pointer to problem + integer (32 bit) + + + packet-too-big + oversized MTU + integer (32 bit) + + + id + ID of echo request/response + integer (16 bit) + + + sequence + sequence number of echo request/response + integer (16 bit) + + + max-delay + maximum response delay of MLD queries + integer (16 bit) + + + +
+ + TCP header expression -- cgit v1.2.3