Filter
Top Products
expr Commands
E-DOC-CTC-20071119-0014 v1.0
333
ftp-data|gopher|h323|httpproxy|ike|ils|imap2|
imap3|ingres-net|ipcserver|ipx|irc-o|irc-u|
kerberos|ldap|login|netbios-dgm|netbios-ns|
netbios-ssn|netwall|netware-ip|new-rwho|nfds|
nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3|
printer|qotd|realaudio|rip|rtelnet|rtsp|sip|
smtp|snmp|snmptrap|snpp|sntp|sql*net|sql-
net|sqlserv|sunrpc|syslog|systat|talk|...}or
number]>
[dstportend = <{at-echo|at-nbp|at-rtmp|at-
zis|auth|bgp|biff|bootpc|bootps|finger|ftp|
ftp-data|gopher|h323|httpproxy|ike|ils|imap2|
imap3|ingres-net|ipcserver|ipx|irc-o|irc-u|
kerberos|ldap|login|netbios-dgm|netbios-ns|
netbios-ssn|netwall|netware-ip|new-rwho|nfds|
nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3|
printer|qotd|realaudio|rip|rtelnet|rtsp|sip|
smtp|snmp|snmptrap|snpp|sntp|sql*net|sql-
net|sqlserv|sunrpc|syslog|systat|talk|...}or
number]>
[icmptype [!] = <{echo-reply|destination-
unreachable|source-quench|redirect|exceeded|
parameter-problems|timestamp-request|
timestamp-reply|information-request|
information-reply|address-mask-request|
address-mask-reply} or number]>
[icmpcode [!] = <number{0-15}]>
[icmpcodeend = <number{0-15}]>
where:
name The name of an expression to add. REQUIRED
type The type of an expression. OPTIONAL
mac [!] The MAC address.
If a value is preceded by a “!”, it means NOT.
REQUIRED
addr [!] The IP address or range.
If a value is preceded by a “!”, it means NOT.
REQUIRED
mask [ The IP mask (ignored if an IP range is provided). OPTIONAL
intf [!] The IP interface name.
If a value is preceded by a “!”, it means NOT.
OPTIONAL
intfgroup [!] The IP interface group.
If a value is preceded by a “!”, it means NOT.
OPTIONAL
tos [!] The Type Of Service specification in the IP
packet.
If a value is preceded by a “!”, it means NOT.
OPTIONAL