Chapter 2 - Features set
User Manual
R5000 series - Web GUI
57
dst portrange
port1-port2
True if the packet is ip/tcp, ip/udp and has a destination
port value between
port1
and
port2
port1
and
port2
are interpreted in the same fashion as the
port parameter for
port
src portrange
port1-port2
True if the packet has a source port value between
port1
and
port2
portrange
port1-port2
True if either the source or destination port of the packet is
between
port1
and
port2
Any of the above port or port range expressions can be
prefixed with the keywords,
tcp
or
udp
, as in:
“tcp src port
port
”
This matches only tcp packets whose source port is
port
less
length
True if the packet has a length less than or equal to
length
This is equivalent to:
“len <= length”
greater
length
True if the packet has a length greater than or equal to
length
This is equivalent to:
“len >= length”
ip
proto
protocol
True if the packet is an IPv4 packet of protocol type
protocol
Protocol
can be a number or one of the names
icmp
,
icmp6
,
igmp
,
igrp
,
pim
,
ah
,
esp
,
vrrp
,
udp
, or
tcp
The identifiers
tcp
,
udp
, and
icmp
are also keywords and
must be escaped via backslash (\), which is \\ in the C-shell
This primitive does not chase the protocol header chain
ip
protochain
protocol
True if the packet is IPv4 packet, and contains protocol
header with type
protocol
in its protocol header chain
For example,
“ip protochain 6” matches any IPv4 packet
with TCP protocol header in the protocol header chain
The packet may contain, for example, authentication
header, routing header, or hop-by-hop option header,
between IPv4 header and TCP header
The code emitted by this primitive is complex and cannot
be optimized, so this can be somewhat slow
ether
broadcast
True if the packet is an Ethernet broadcast packet
The
ether
keyword is optional