Ce contenu n'est pas disponible dans la langue sélectionnée.
18.12.10.7. TCP/UDP/SCTP
Protocol ID: tcp, udp, sctp
The chain parameter is ignored for this type of traffic and should either be omitted or set to root. .
Attribute Name | Datatype | Definition |
---|---|---|
srcmacaddr | MAC_ADDR | MAC address of sender |
srcipaddr | IP_ADDR | Source IP address |
srcipmask | IP_MASK | Mask applied to source IP address |
dstipaddr | IP_ADDR | Destination IP address |
dstipmask | IP_MASK | Mask applied to destination IP address |
scripto | IP_ADDR | Start of range of source IP address |
srcipfrom | IP_ADDR | End of range of source IP address |
dstipfrom | IP_ADDR | Start of range of destination IP address |
dstipto | IP_ADDR | End of range of destination IP address |
scrportstart | UNIT16 | Start of range of valid source ports; requires protocol |
srcportend | UINT16 | End of range of valid source ports; requires protocol |
dstportstart | UNIT16 | Start of range of valid destination ports; requires protocol |
dstportend | UNIT16 | End of range of valid destination ports; requires protocol |
comment | STRING | text string up to 256 characters |
state | STRING | comma separated list of NEW,ESTABLISHED,RELATED,INVALID or NONE |
flags | STRING | TCP-only: format of mask/flags with mask and flags each being a comma separated list of SYN,ACK,URG,PSH,FIN,RST or NONE or ALL |
ipset | STRING | The name of an IPSet managed outside of libvirt |
ipsetflags | IPSETFLAGS | flags for the IPSet; requires ipset attribute |