fuchsia.net.matchers

Whether to check for an "inverse" or "negative" match (in which case, if the matcher criteria do not apply, it is considered a match, and vice versa).

The inclusive start of the address range.

The inclusive end of the address range.

Start of the range, inclusive.

End of the range, inclusive.

Mask to apply before comparing to the range in between.

The mark is between the given range.

Whether to check for an "inverse" or "negative" match.

The mask is applied as normal, but the value is checked for inequality.

The inclusive start of the port range.

The inclusive end of the port range.

Whether to check for an "inverse" or "negative" match.

The cookie value to compare for equality.

Whether to check for an "inverse" or "negative" match.

1

Matcher for the TCP source port.

2

Matcher for the TCP destination port.

1

Matcher for the UDP source port.

2

Matcher for the UDP destination port.

1

The subnet that must contain the IP address in the packet header in order for it to match.

2

The range of addresses that must include the IP address in the packet header in order for it to match.

The endpoints of the range must be in the same address family, and start must <= end. (Comparisons are performed on the numerical big-endian representation of the IP address.)

1

Matches the device iff the names match.

The name is not a pattern or regex, it needs to be an exact match for the rule to be chosen.

2

Matches iff the outgoing traffic is not bound to a device.

1

The ID of the interface as assigned by the netstack.

2

The name of the interface.

3

The port class of the interface.

1

This mark domain does not have a mark.

2

1

2

3

4

1

Matches against TCP fields.

2

Matches against UDP fields.

1

Only matches against the transport protocol and nothing else.

2

Match against the source port of TCP sockets.

3

Match against the destination port of TCP sockets.

4

The TCP socket's state must be contained in the set of states. If unset, matches all states, just as if it was fully set.

The constants are structured to correspond to the enum values of fuchsia.net.tcp.States.

1

Only matches against the transport protocol and nothing else.

2

Match against the source port of UDP sockets.

3

Match against the destination port of UDP sockets.

4

The UDP socket's state must be contained in the set of states.

If unset, matches all states, just as if it was fully set.

ESTABLISHED

SYN_SENT

SYN_RECV

FIN_WAIT1

FIN_WAIT2

TIME_WAIT

CLOSE

CLOSE_WAIT

LAST_ACK

LISTEN

CLOSING

BOUND

The UDP socket is bound but not connected.

CONNECTED

The UDP socket is explicitly connected.