Cyclades AlterPath ACS, Command Reference Manual

Page: 142 / 420

126
Network
Match Extensions
Iptables can use extended packet matching modules. These are loaded in two ways:
implicitly, when -p or - -protocol is specified, or with the -m or - -match option, followed
by the matching module name; after these, various extra command line options become
available, depending on the specific module.
-v - -verbose
Verbose output. This option makes the list command show the interface
address, the rule options (if any), and the TOS masks. The packet and byte
counters are also listed, with the suffix 'K', 'M' or 'G' for 1000, 1,000,000 and
1,000,000,000 multipliers respectively (but see the -x flag to change this). For
appending, insertion, deletion and replacement, this causes detailed
information on the rule or rules to be printed.
-n - -numeric
Numeric output. IP addresses and port numbers will be printed in numeric
format. By default, the program will try to display them as host names,
network names, or services (whenever applicable).
-x - -exact
Expand numbers. Display the exact value of the packet and byte counters,
instead of only the rounded number in K's (multiples of 1000) M's (multiples
of 1000K) or G's (multiples of 1000M). This option is only relevant for the -L
command.
- -line-numbers When listing rules, add line numbers to the beginning of each rule,
corresponding to that rule's position in the chain.
Parameter Description
Table 4.4: iptables rules specifications