I suggest adding the following note about the addr field. diff --git a/doc/payload-expression.txt b/doc/payload-expression.txt index 7bc24a8a..9a7ac396 100644 --- a/doc/payload-expression.txt +++ b/doc/payload-expression.txt @@ -820,6 +820,8 @@ Strict Source Route | type, length, ptr, addr |============================ +Note: Only the first IP address is specified in the addr field. + .finding TCP options -------------------- filter input tcp option sack-perm exists counter
