Juniper JUNOS OS 10.3 - SOFTWARE, Manual, Page: 3933 / 3946

To combine expressions, use the logical operators listed in Table 508 on page 3837.
Table 508: Logical Operators for the monitor traffic Command
Description
Logical Operator (Highest to
Lowest Precedence)
Logical NOT. If the first condition does not match, the next condition is evaluated. !
Logical AND. If the first condition matches, the next condition is evaluated. If the first condition
does not match, the next condition is skipped.
&&
Logical OR. If the first condition matches, the next condition is skipped. If the first condition
does not match, the next condition is evaluated.
||
Group operators to override default precedence order. Parentheses are special characters,
each of which must be preceded by a backslash (
\ ).
( )
You can use relational operators to compare arithmetic expressions composed of integer
constants, binary operators, a length operator, and special packet data accessors. The
arithmetic expression matching condition uses the following syntax:
monitor traffic matching "ether[0] & 1 != 0""arithmetic_expression relational_operator
arithmetic_expression"
The packet data accessor uses the following syntax:
protocol [byte-offset <size>]
The optional size field represents the number of bytes examined in the packet header.
The available values are
1, 2,
or
4
bytes.The following sample command captures all
multicast traffic:
user@host> monitor traffic matching "ether[0] & 1 != 0"
To specify match conditions that have a numeric value, use the arithmetic and relational
operators listed in Table 509 on page 3838.
3837 Copyright © 2010, Juniper Networks, Inc.
Chapter 135: Operational Mode Commands for General Network Management and Monitoring