Displaying 1 result from an estimated 1 matches for "matching_packet_header_field".
Did you mean:
matching_packet_header_fields
2016 Sep 11
1
[Bug 1086] New: Nftables matching packet header fields and unexpected '(': wrong wiki info or bug?
...EW
Severity: minor
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: 1000.ontheroad at gmail.com
Official nftables "wiki", on the Matching-packet-header-fields section
(https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_header_fields),
suggests the following example to match packets with flags SYN and ACK set:
% nft -i
nft> add rule filter output tcp flags & (syn | ack) == (syn | ack) counter log
When putting it into practice, it fails:
<cli>:1:51-51: Error: syntax error, unexpected '('
add rule filter...