Chinaunix首页 | 论坛 | 博客
  • 博客访问: 611643
  • 博文数量: 150
  • 博客积分: 1132
  • 博客等级: 少尉
  • 技术积分: 2067
  • 用 户 组: 普通用户
  • 注册时间: 2012-04-11 16:46
文章分类

全部博文(150)

文章存档

2015年(15)

2014年(75)

2013年(4)

2012年(56)

分类: LINUX

2012-06-28 11:03:50

Iptables can use extended packet matching modules. 
These are loaded in two ways: implicitly, when -p or --protocol is specified,or with the -m or --match options, followed by the matching module name; after these, various extra command line options become available, depending on the specific module.
===========================================================================
You can specify multiple extended match modules in one line, and you can use the -h or --help options after the module has been specified to receive help specific to that module.
===========================================================================
两个例子:
tos:
  This module matches the 8 bits of Type of Service field in the IP header (ie. including the precedence bits).
  tos --tos
  The argument is either a standard name,(use ‘iptables -m tos -h’ to see the list), or a numeric value to match.

length:
  -m length --length 100  
  其中,100指定的是IP数据包的大小。而在ping中,用-l(windows下)或-s(linux下)指定的是要发送的数据data的大小。这样的数据要先后加上ICMP头--8字节、IP头--20字节...
===========================================================================
关于tos:
 tos.doc   
阅读(1316) | 评论(0) | 转发(0) |
给主人留下些什么吧!~~