Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)

[!] --tunnel-src addr[/mask]
[!] --tunnel-dst addr[/mask]
--next
quota
Implements network quota by decrementing a byte counter with each packet.
--quota bytes
The quota in bytes.
rateest *
Rate estimator.
Not supported because it is mainly for making routing decisions (mangle table).
realm *
Matches the routing realm.
Not supported because it is for dynamic routing.
recent
Matches against dynamically constructed list of IP addresses.
--name name
[!] --set
--rsource
--rdest
[!] --rcheck
[!] --update
[!] --remove
--seconds seconds
--hitcount hits
--rttl
sctp
Matches SCTP-specific information.
[!] --source-port | --sport port[:port]
[!] --destination-port | --dport port[:port]
[!] --chunk-types all|any|only chunktype[:flags] [...]
set *
Matches IP sets which can be defined by ipset(8).
Not supported because ipset is not supported.
socket
Matches if an open socket can be found by doing a socket lookup on the packet.
state
Allows access to conntrack state for this packet.
[!] --state statelist
Where statelist is a comma-separated list of the connection states to match. Possible states
are INVALID, ESTABLISHED, NEW, and RELATED.
statistic
Matches packets based on some statistic condition.
--mode mode
342