---
name: "tc-connmark"
section: "8"
platform: "linux"
package: "iproute2"
version: "7.3.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/tc-connmark"
---

# tc-connmark(8)

netfilter connmark retriever action

## NAME

connmark - netfilter connmark retriever action

## SYNOPSIS

**tc** ... **action connmark** \[ **zone** *u16\_zone\_index* \] \[ *CONTROL* \] \[ **index** *u32\_index*  \]

*CONTROL* := { *reclassify* \| *pipe* \| *drop* \| *continue* \| *ok* }

## DESCRIPTION

The connmark action is used to restore the connection's mark value into the packet's fwmark.

## OPTIONS

- **zone** *u16\_zone\_index*

  Specify the conntrack zone when doing conntrack lookups for packets. *u16\_zone\_index* is a 16bit unsigned decimal value.

- *CONTROL*

  How to continue after executing this action.

  - **reclassify**

    Restarts classification by jumping back to the first filter attached to this action's parent.

  - **pipe**

    Continue with the next action, this is the default.

  - **drop** **shot**

    Packet will be dropped without running further actions.

  - **continue**

    Continue classification with next filter in line.

  - **pass**

    Return to calling qdisc for packet processing. This ends the classification process.

- **index** *u32\_index*

  Specify an index for this action in order to being able to identify it in later commands. *u32\_index* is a 32bit unsigned decimal value.

## SEE ALSO

[**tc**(8)](/tc/8.md)