State Caching

• ip = srcdst [flags] [with withopt] [icmp] [keep]

• keep = "keep state"

• only allowed with proto imcp, udp, tcp or tcp/udp

• packets are first matched against the state table

• short packets will never match

• state table remembers interfaces

• state table remembers action

• state info depends on protocol

• there is no direction (i.e. in or out) in state entries

Notes: