Table of Contents
Advertisement
Chapter 21
Rules
Table 21-1
Rule Field
Source IP
78-17020-01
Rule Fields and Arguments
Field Description and Arguments
IP address of the packet originator.
Variables
Network Groups
Networks
Devices
IP addresses
IP ranges
Argument Descriptions
ANY—(Default). Signifies that the
IP address for each count is any IP
address.
SAME—Signifies that the IP address
for each count is the same IP address.
This variable is local to its offset.
DISTINCT— Signifies that the IP
address for each count is a unique IP
address. This variable is local to its
offset.
$Target01 to $Target20—The same
variable in another field or offset
signifies that the IP address for each
count is the same IP address.
Defined network groups—
Topologically valid network groups as
defined under Management > IP
Management.
Topologically valid network groups as
defined under Management > IP
Management.
The hosts and reporting devices
present in the system.
IP addresses present on devices in the
system or user entered dotted quads.
The range of addresses between two
dotted quads.
User Guide for Cisco Security MARS Local Controller
Constructing a Rule
21-7
Advertisement
Table of Contents
Troubleshooting
