From 61417cee5323259c5d29183b40296ad50140c5ca Mon Sep 17 00:00:00 2001 From: uwe Date: Tue, 8 Jan 2019 11:36:10 +0000 Subject: [PATCH] Actually, according to the grammar the square brackets in the "tcp flags" are not literal, so use .Op to show that /mask is optional. --- usr.sbin/npf/npfctl/npf.conf.5 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/npf/npfctl/npf.conf.5 b/usr.sbin/npf/npfctl/npf.conf.5 index 78876d568d6d..32de2205da52 100644 --- a/usr.sbin/npf/npfctl/npf.conf.5 +++ b/usr.sbin/npf/npfctl/npf.conf.5 @@ -1,4 +1,4 @@ -.\" $NetBSD: npf.conf.5,v 1.82 2019/01/08 11:28:01 uwe Exp $ +.\" $NetBSD: npf.conf.5,v 1.83 2019/01/08 11:36:10 uwe Exp $ .\" .\" Copyright (c) 2009-2017 The NetBSD Foundation, Inc. .\" All rights reserved. @@ -223,7 +223,7 @@ The keyword can be used to match the packets against specific TCP flags, according to the following syntax: .Pp -.D1 Ic proto Cm tcp flags Ar match Ns Li [/ Ns Ar mask Ns Li \&] +.D1 Ic proto Cm tcp flags Ar match Ns Op Li / Ns Ar mask .Pp Where .Ar match