The green bar indicates how many "points" are left to be used by matching packets.
Every packet takes as many points as it weights. When the level goes down to zero whole iptables
rule is considered matched and the -j
part is executed.
Use Restore
to recalculate packet weight and points to use after changing
--hashlimit-above
and --hashlimit-burst
.
You can "send" packets at a specified rate or manually.
Notice that every second a 32000 point refill occurs.
This tool has been written based on an observation of the correlation between values of
--hashlimit-above
, --hashlimit-burst
and result watched through
/proc/net/ipt_hashlimit/*
on
Linux magazyn-ziarno 2.6.26-1-686 #1 SMP Sat Jan 10 18:29:31 UTC 2009 i686 GNU/Linux