Syntax Of Client Rights - SMC Networks ELITECONNECT SMC2502W User Manual

Allowable primitives are shown in
Table A-1 Allowable Primitives
Primitive
dst host host
src host host
host host
ether dst ehost
ether src ehost
ether host ehost
dst net net
src net net
net net
net net mask mask
net net/len
dst port port
src port port
port port
less length
greater length
A-2
Table A-1.
Explanation
True if the destination field of the packet is host, which can be
either an address or a name.
True if the source field of the packet is host.
True if either the source or destination of the packet is host.
True if the Ethernet destination address is ehost. Ehost can be
either a name from /etc/ethers or a number (see ethers(3N) for
numeric format).
True if the Ethernet source address is ehost.
True if either the ethernet source or destination address is ehost.
True if the destination address of the packet has a network
number of net. Net can be either a name from /etc/networks or a
network number (see networks(4) for details).
True if the source address of the packet has a network number of
net.
True if either the source or destination address of the packet has
a network number of net.
True if the IP address matches net with the specific netmask. Can
be qualified with src or dst.
True if the address matches net a netmask len bits wide. Can be
qualified with src or dst.
True if the packet is ip/tcp or ip/udp, and has a destination port
value of port. The port can be a number or a name used in
/etc/services (see tcp(4P) and udp(4P)). If a name is used, both
the port number and protocol are checked. If a number or
ambiguous name is used, only the port number is checked (e.g.,
dst port 513 will print both tcp/login graphic and udp/who traffic,
and port domain will print both tcp/domain and udp/domain
traffic).
True if the packet has a source port value of port.
True if either the source or destination port of the packet is port.
Any of the above port expressions can be prepended with the
keywords, tcp or udp, as in, for example, t
cp src port port
which matches only tcp packets whose source port is port.
True if the packet has a length less than or equal to length. This
is equivalent to
len <= length.
True if the packet has a length greater than or equal to length.
This is equivalent to
len >= length.

Syntax of Client Rights