On Monday 2008-12-08 18:14, Jan Engelhardt wrote: >On Monday 2008-12-08 17:58, Max Kellermann wrote: > >>On 2008/12/08 16:55, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: >>> The documentation is correct with what iptables outputs: >> >>Try "iptables -m tcp --help" (v1.4.1.1): >> >> --tcp-flags [!] mask comp match when TCP flags & mask == comp >> (Flags: SYN ACK FIN RST URG PSH ALL >> NONE) >> >>So manpage and usage text is inconsistent... > >It is not (hint: try LATEST git version first): > > printf( >"tcp match options:\n" >"[!] --tcp-flags mask comp match when TCP flags & mask == comp\n" >" (Flags: SYN ACK FIN RST URG PSH ALL NONE)\n" I have however noticed that some code outputs the ! not always as documented in the manpage. A just-submitted patch fixes that. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html