306
•
Relational operators
—
Indicate the relation between keyword strings. For example, the
=
operator indicates equality.
This document provides basic information about these elements. For more information about
capture and display filters, go to the following websites:
•
http://wiki.wireshark.org/CaptureFilters
•
http://wiki.wireshark.org/DisplayFilters
Capture filter keywords
describe the qualifiers and variables for capture filters, respectively.
Table 28 Qualifiers for capture filters
Category
Description
Examples
Protocol
Matches a protocol.
If you do not specify a protocol
qualifier, the filter matches any
supported protocols.
•
arp
—Matches ARP.
•
icmp
—Matches ICMP.
•
ip
—Matches IPv4.
•
ip6
—Matches IPv6.
•
tcp
—Matches TCP.
•
udp
—Matches UDP.
Direction
Matches packets based on its
source or destination location (an
IP address or port number).
If you do not specify a direction
qualifier, the
src or dst
qualifier
applies.
•
src
—Matches the source IP address
field.
•
dst
—Matches the destination IP address
field.
•
src or dst
—Matches the source or
destination IP address field.
NOTE:
The
src or dst
qualifier applies if you do not
specify a direction qualifier. For example,
port 23
is equivalent to
src or dst port 23
.
Type
Specifies the direction type.
•
host
—Matches the IP address of a host.
•
net
—Matches an IP subnet.
•
port
—Matches a service port number.
•
portrange
—Matches a service port
range.
NOTE:
The
host
qualifier applies if you do not
specify any type qualifier. For example,
src
2.2.2.2
is equivalent to
src host 2.2.2.2
.
To specify an IPv6 subnet, you must specify
the
net
qualifier.
Others
Any other qualifiers than the
previously described qualifiers.
•
broadcast
—Matches broadcast packets.
•
multicast
—Matches multicast and
broadcast packets.
•
less
—Matches packets that are less than
or equal to a specific size.
•
greater
—Matches packets that are
greater than or equal to a specific size.
•
len
—Matches the packet length.
•
vlan
—Matches VLAN packets.
Summary of Contents for FlexNetwork 10500 SERIES
Page 224: ...213 ...
Page 311: ...300 Now the system can record log information to the specified file ...