1This module attempts to match various characteristics of the packet
2creator, for locally-generated packets.  It is only valid in the
3.B OUTPUT
4chain, and even this some packets (such as ICMPv6 ping responses) may
5have no owner, and hence never match.  This is regarded as experimental.
6.TP
7.BI "--uid-owner " "userid"
8Matches if the packet was created by a process with the given
9effective user id.
10.TP
11.BI "--gid-owner " "groupid"
12Matches if the packet was created by a process with the given
13effective group id.
14.TP
15.BI "--pid-owner " "processid"
16Matches if the packet was created by a process with the given
17process id.
18.TP
19.BI "--sid-owner " "sessionid"
20Matches if the packet was created by a process in the given session
21group.
22.TP
23.B NOTE: pid, sid and command matching are broken on SMP
24