Deleting A Packet Filter; Verifying Filter File Syntax; Showing Filter File Contents; Generating Syslog Messages For Filtered Packets - 3Com 3C421600A Management Manual

232 C 14: H
HAPTER ANDLING
Deleting a Packet
Filter
Verifying Filter File
Syntax
Showing Filter File
Contents
Generating SYSLOG
Messages for Filtered
Packets
P F
ACKET ILTERS
To delete a specific packet filter, removing the filter file from the filter list
and permanently from FLASH memory, use the following commands:
delete filter <filter_name>
delete file <file_name>
The verify filter command is useful if you make changes to a filter
file that has already been added to the managed list and re-TFTP the file
back into FLASH memory (using the same filename). This command
checks the filter syntax, compiles it and if valid, generates no message
and returns the command prompt. If invalid, error messages are
generated detailing the error sources.
Filter file changes are designed to take effect on an interface immediately
after you issue the set interface command. So remember to remove
and reapply the filter to ensure new filter rules apply to all affected
interfaces.
To verify a filter file, use the following command:
verify filter <filter_name>
To view the contents of an entire filter file that has been added to the
managed list of filters, use the following command:
show filter <filter_name>
To display the contents of the filter file by protocol, use the following
command:
show filter <name> protocol [ ip | ip-call | ip-rip | ipx |
ipx-call | ipx-rip | ipx-sap | login-access]
You can save filtered packets to a configured SYSLOG server, allowing
you to track down a potentially malicious user. Due to the large amount
of traffic this command could generate, its anticipated use would only be
for a short time.
Use the following command:
set packet_logging
logging [all | radius | none]
packet_size [0-493 bytes]