EXPR COMMANDS
430
DMS-CTC-20101206-0049 v1.0.Copyright 2011Technicolor. All rights reserved.
This document contains Technicolor proprietary and confidential information. Passing on and copying of this document, use,
extraction and communication of its contents, is not permitted without written authorization from Technicolor.
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstport [!] = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstportend = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[icmptype [!] = <{echo-reply|destination-
unreachable|source-quench|redirect|exceeded|
parameter-problems|timestamp-request|
timestamp-reply|information-request|
information-reply|address-mask-request|
address-mask-reply} or number>]
[icmpcode [!] = <number{0-15}>]
[icmpcodeend = <number{0-15}>]
iplengthmin [!] = <er{0-15}>
[iplengthmax = <er{0-15}>]
where:
name
The name of an expression to modify.
REQUIRED
type
The type of an expression.
OPTIONAL
index
The index of a subexpression.
REQUIRED
mac [!]
The MAC address.
If a value is preceded by a “!”, it means NOT.
REQUIRED
addr [!]
The IP address or range.
If a value is preceded by a “!”, it means NOT.
REQUIRED
mask [
The IP mask (ignored if an IP range is provided).
OPTIONAL