diff --git a/extensions/libxt_ipp2p.man b/extensions/libxt_ipp2p.man index cdaf3c3..9a76451 100644 --- a/extensions/libxt_ipp2p.man +++ b/extensions/libxt_ipp2p.man @@ -1,12 +1,12 @@ This module matches certain packets in P2P flows. It is not designed to match all packets belonging to a P2P connection - -use IPP2P together with CONNMARK for this purpose. Also visit -http://www.ipp2p.org for detailed information. - +use IPP2P together with CONNMARK for this purpose. +.PP Use it together with -p tcp or -p udp to search these protocols only or without -p switch to search packets of both protocols. - -IPP2P provides the following options: +.PP +IPP2P provides the following options, of which one or more may be specified +on the command line: .TP .B "--edk " Matches as many eDonkey/eMule packets as possible. @@ -38,3 +38,11 @@ Matches Ares and AresLite packets. Use together with -j DROP only. .B "--debug " Prints some information about each hit into kernel logfile. May produce huge logfiles so beware! +.PP +Note that ipp2p may not (and often, does not) identify all packets that are +exchanged as a result of running filesharing programs. +.PP +There is more information on http://ipp2p.org/ , but it has not been updated +since September 2006, and the syntax there is different from the ipp2p.c +provided in Xtables-addons; most importantly, the --ipp2p flag was removed due +to its ambiguity to match "all known" protocols.