tc ... action xt -j TARGET [ TARGET_OPTS ]
The xt action allows one to call arbitrary iptables targets for packets matching the filter this action is attached to.
- -j TARGET [ TARGET_OPTS ]
- Perform a jump to the given iptables target, optionally passing any target specific options in TARGET_OPTS.
The following will attach a u32 filter to the ingress qdisc matching ICMP replies and using the xt action to make the kernel yell 'PONG' each time:
tc qdisc add dev eth0 ingress
tc filter add dev eth0 parent ffff: proto ip u32 \
match ip protocol 1 0xff \
match ip icmp_type 0 0xff \
action xt -j LOG --log-prefix PONG