Hi, On Wed, Feb 05, 2025 at 03:29:10PM +0300, Alexey Kashavkin wrote: > I suggest adding the following note about the addr field. > > diff --git a/doc/payload-expression.txt b/doc/payload-expression.txt > index 7bc24a8a..9a7ac396 100644 > --- a/doc/payload-expression.txt > +++ b/doc/payload-expression.txt > @@ -820,6 +820,8 @@ Strict Source Route | > type, length, ptr, addr > |============================ > > +Note: Only the first IP address is specified in the addr field. It should be not too complicated to extend this to match on any address. > + > .finding TCP options > -------------------- > filter input tcp option sack-perm exists counter > >
