https://wiki.packet-o-matic.org/ 2026-04-30T01:36:58+00:00 https://wiki.packet-o-matic.org/ https://wiki.packet-o-matic.org/lib/tpl/dokuwiki/images/favicon.ico text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/80211?rev=1590530356&do=diff match_80211 This module matches wireless (802.11) frames. It has the following fields : Field name Field type Description src mac Source MAC address dst mac Destination MAC address bssid mac BSSID MAC address type uint8 802.11 frame type subtype text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/docsis_mgmt?rev=1590530356&do=diff match_docsis_mgmt This module match DOCSIS Management frames. It has the following fields : Field name Field type Description saddr mac Source MAC address daddr mac Destination MAC address dsap uint8 DDSAP ssap uint8 SSAP control uint8 Control text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/docsis?rev=1590530356&do=diff match_docsis This module match DOCSIS frames. See the DOCSIS specifications for the possible values and the meaning of the it's fields. It has the following fields : Field name Field type Description fc_type uint8 Frame control type (2 bits) fc_parm uint8 Frame parameter (5 bits) text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/ethernet?rev=1590530356&do=diff match_ethernet This module matches ethernet frames. It has the following fields : Field name Field type Description src mac Source MAC address dst mac Destination MAC address text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/icmp?rev=1590530356&do=diff match_icmp This module match ICMP packets. It has the following fields : Field name Field type Description type uint8 ICMP packet type code uint8 ICMP code text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/icmpv6?rev=1590530356&do=diff match_icmpv6 This module match ICMPv6 packets. It has the following fields : Field name Field type Description type uint8 ICMPv6 packet type code uint8 ICMPv6 code text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/ipv4?rev=1590530356&do=diff match_ipv4 This module match IPv4 packets also known as IP packets. It has the following fields : Field name Field type Description src ipv4 Source address dst ipv4 Destination address tos uint8 Type of service ttl uint8 Time to live text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/ipv6?rev=1590530356&do=diff match_ipv6 This module match IPv6 packets. This is the next generation of the IP protocol. It has the following parameters : Field name Field type Description src ipv6 Source address dst ipv6 Destination address flabel uint32 Flow label (20 bits) text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/linux_cooked?rev=1590530356&do=diff match_linux_cooked This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface 'lo' will create this type of frames. It has the following fields : text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/ppi?rev=1590530356&do=diff match_ppi This module match PPI headers. PPI stands for Per Packet Information. See here for the specifications. This match has no field at the moment. text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/ppp?rev=1590530356&do=diff match_ppp This module match PPP headers. PPP stands for Point-to-Point Protocol. This match has no field at the moment. text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/pppoe?rev=1590530356&do=diff match_pppoe This module match PPPoE packets. It has the following fields : Field name Field type Description code uint8 PPPoE code session uint16 PPPoE session ID text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/prism?rev=1590530356&do=diff match_prism This module match prism2 or AVS headers. This match has no field at the moment. text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/radiotap?rev=1590530356&do=diff match_radiotap This module match radiotap or AVS headers. This match has no field at the moment. text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/rtp?rev=1590530356&do=diff match_rtp This module match RTP packets. RTP packets are most of the time encapsulated in UDP datagrams. Because of this, it's impossible to determine that a UDP datagram contains a RTP packet. You have to tell packet-o-matic that a packet contains RTP packet or it won't be able to find it out. This is done simply by creating a rule that containes the RTP layer. For example, the following rule assume that all UDP datagrams from 10.0.0.0/8 are RTP packets : text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/tcp?rev=1590530356&do=diff match_tcp This module match TCP segments. It has the following fields : Field name Field type Description sport uint16 Source port dport uint16 Destination port flags uint8 TCP flags (URG, ACK, PSH, RST, SYN, FIN) seq uint32 Sequence number ack uint32 text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/udp?rev=1590530356&do=diff match_udp This module match UDP datagrams. It has the following fields : Field name Field type Description sport uint16 Source port dport uint16 Destination port text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/undefined?rev=1590530356&do=diff match_undefined This match is used internally by packet-o-matic and should not be used in your rules. text/html 2020-05-26T21:59:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.packet-o-matic.org/pom/match/vlan?rev=1590530356&do=diff match_vlan This module matches VLAN frames also known as 802.1Q. It has the following fields : Field name Field type Description vid uint16 VLAN id