cfy [global params] cmd [cmd option] Global Parameters: -h - print this help message -v - verbose, print debug messages (same as -w info) -f fid - filter id: for em fid = qid; for gm fid = filter number (0 - 128), not qid -c ctype - classifier type, gm em; default is gm -q qid - queue ID (aka flow table entry number, 0 - 9), reserved flows (em and exclusive-gm) only -x prio - set gem/gnm filter priority to prio -p n - Port number of SPC to communicate with Actions and Flags -d - Drop packets matching this rule, must be a GM, Exclusive filter -o - Applies to an output port, **Default is Input Port** -n - Non-exclusive general match filter, **Default is Exclusive gm** Valid Commands null : Null or no-op command. Used to verify connetivity addfltr : Add a new filter spec sa : -sa ipaddr[/width]: Source Address or Net with prefix width sp : -sp start[,end]: Source Port number or range da : -da ipaddr[/width]: Destination Address or Net with prefix width dp : -dp start[,end]: Destination Port number or range pr : -pr n|string: Protocol, can use numeric value or string rt : -rt [sid/]port[/sub]: Statically set the forwarding key remfltr : Remove filter: must specify type (-c) and filter id (-f) sa : -sa ipaddr[/width]: Source Address or Net with prefix width sp : -sp start[,end]: Source Port number or range da : -da ipaddr[/width]: Destination Address or Net with prefix width dp : -dp start[,end]: Destination Port number or range pr : -pr n|string: Protocol, can use numeric value or string rt : -rt [sid/]port[/sub]: Statically set the forwarding key flist : List all installed filters of type em or gm (-c em|gm) info : Print the list of active classifier entries sa : -sa ipaddr[/width]: Source Address or Net with prefix width sp : -sp start[,end]: Source Port number or range da : -da ipaddr[/width]: Destination Address or Net with prefix width dp : -dp start[,end]: Destination Port number or range pr : -pr n|string: Protocol, can use numeric value or string rt : -rt [sid/]port[/sub]: Statically set the forwarding key pktcnt : Return the packet count for a filter (use fid or 5-tuple) sa : -sa ipaddr[/width]: Source Address or Net with prefix width sp : -sp start[,end]: Source Port number or range da : -da ipaddr[/width]: Destination Address or Net with prefix width dp : -dp start[,end]: Destination Port number or range pr : -pr n|string: Protocol, can use numeric value or string rt : -rt [sid/]port[/sub]: Statically set the forwarding key