Cisco ASR 9000 Series Routing Configuration Manual page 238

Information About Implementing BGP Flowspec
Type 6
Type 7
Type 8
Type 9
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
208
IPv4 Source port Defines a list of {operation, value} pairs used
to match the source port of a TCP or UDP
packet. Values are encoded as 1- or 2-byte
quantities.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match source-port {source-port-value
|[min-value - max-value]}
IPv4 ICMP type Defines a list of {operation, value} pairs used
to match the type field of an ICMP packet.
Values are encoded using a single byte. The
ICMP type and code specifiers evaluate to
FALSE whenever the protocol value is not
ICMP.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match{ipv4}icmp-type {value |min-value
-max-value}
IPv4 ICMP code Defines a list of {operation, value} pairs used
to match the code field of an ICMP packet.
Values are encoded using a single byte.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match {ipv4}icmp-code {value |min-value
-max-value}
IPv4 TCP flags (2 Bitmask values can be encoded as a 1- or
bytes include 2-byte bitmask. When a single byte is
reserved bits) specified, it matches byte 13 of the TCP
Reserved header, which contains bits 8 through 15 of
Note
and NS bit the 4th 32-bit word. When a 2-byte encoding
not is used, it matches bytes 12 and 13 of the TCP
supported header with the data offset field having a
"don't care" value. As with port specifier, this
component evaluates to FALSE for packets
that are not TCP packets. This type uses the
bitmask operand format, which differs from
the numeric operator format in the lower
nibble.
Encoding: <type (1 octet), [op, bitmask]+>
Syntax:
match tcp-flag value bit-mask mask_value
Implementing BGP Flowspec
Multi value range
Single value
Single value
Bit mask