Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)

--rt-type [!] type
--rt-segsleft [!] num[:num]
--rt-len [!] length
--rt-0-res
--rt-0-addrs ADDR[,ADDR...]
--rt-0-not-strict
sctp
Matches SCTP-specific information.
[!] --source-port | --sport port[:port]
[!] --destination-port | --dport port[:port]
[!] --chunk-types all|any|only chunktype[:flags] [...]
set *
Matches IP sets which can be defined by ipset(8).
Not supported because ipset is not supported.
state
Allows access to conntrack state for this packet.
[!] --state statelist
Where statelist is a comma-separated list of the connection states to match. Possible states
are INVALID, ESTABLISHED, NEW, and RELATED.
statistic
Matches packets based on some statistic condition.
--mode mode
--probability p
--every n
--packet p
string
Matches a given string pattern.
--algo bm|kmp
--from offset
--to offset
[!] --string pattern
[!] --hex-string pattern
tcp
Matches TCP-specific values.
[!] --source-port | --sport port[:port]
[!] --destination-port | --dport port[:port]
[!] --tcp-flags mask comp
[!] --syn
[!] --tcp-option number
tcpmss
Matches the TCP MSS field of the TCP header.
[!] --mss value[:value]
331