Avaya G430 Manual page 387

Configuring rule criteria for a capture list
Procedure
Use the composite-operation command to include a composite operation in a rule
for a capture list.
For example, the following commands create a rule (rule 10 in capture list 510) that
determines that TCP packets are not captured:
Gxxx-001(super)# ip capture-list 510
Gxxx-001(super-Capture 510)# ip-rule 10
Gxxx-001(super-Capture 510/ip rule 10)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 510/ip rule 10)# ip-protocol tcp
Done!
Gxxx-001(super-Capture 510/ip rule 10)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 510/ip rule 10)# ip-protocol tcp
Done!
Gxxx-001(super-Capture 510/ip rule 10)#
Related topics:
Rule applications
Rule criteria commands
Applying rules to packets with DSCP values
Applying rules to packets with IP protocols
Applying rules to source or destination IP address
IP range criteria
Commands used to specify a range of source and destination ports
Port name or number range criteria
Applying rules to ICMP
Fragment command
Capture list example
Rules work in the following ways, depending on the type of information in the packet, and the
number of criteria in the rule:
• L4 rules with a Permit operation are applied to non-initial fragments
• L4 rules with a Deny operation are not applied to non-initial fragments, and the device
continues checking the next IP rule. This is to prevent cases in which fragments that
belong to other L4 sessions may be blocked by the other L4 session which is blocked.
• L3 rules apply to non-initial fragments
• L3 rules that include the fragment criteria do not apply to initial fragments or non-fragment
packets
Administering Avaya G430 Branch Gateway
on page 387
on page 388
on page 389
on page 391
on page 391
on page 392
Rule applications
on page 388
on page 389
on page 389
on page 390
Monitoring applications
on page 390
October 2013 387