On Sun, Dec 25, 2016 at 08:12:55PM +0800, Liping Zhang wrote: > From: Liping Zhang <zlpnobody@xxxxxxxxx> > > Similar to connbytes extension in iptables, now you can use it to match > average bytes per packet a connection has transferred so far. > > For example, match avgpkt in "BOTH" diretion: > # nft add rule x y ct avgpkt \> 100 > > Match avgpkt in reply direction: > # nft add rule x y ct reply avgpkt \< 900 > > Or match avgpkt in original direction: > # nft add rule x y ct original avgpkt \> 200 Applied, thanks Liping. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
