Thursday, 22 March 2018

what is tuples

What is tuples

  • A `tuple' is a structure containing the information to uniquely identify a connection.
    • ie. if two packets have the same tuple, they  are in the same connection; if not, they are not.
  • A 5-tuple refers to a set of five different values that comprise a Transmission Control Protocol/Internet Protocol (TCP/IP) connection. It includes a source IP address/port number, destination IP address/port number and the protocol in use
  • Protocol(tcp or  udp), src ip & port, dst ip & port.
  • It used in the ip tables to identify the unique connections & can able to redirect that connection. 
    • Eg: iptables -t nat -A PREROUTING -p tcp -s 192.168.1.99 --sport 58902 -d 173.223.52.123 --dport 80 -j DNAT --to-destination 192.168.1.254:80

No comments:

Post a Comment