Since traffic passes through the filter in the order of the filter's sequence, you can configure the trace list by
first entering the TRACE LIST mode and then assigning a sequence number to the filter.
To create a filter for packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step
Command Syntax
ip trace-list trace-list-name
1
seq sequence-number
2
| ip-protocol-number
host ip-address
} {
host ip-address
} [
To create a filter for TCP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step
Command Syntax
ip trace-list trace-list-name
1
deny
permit
ip
{
{
|
}
any
} {
|
|
source mask
any
|
|
destination mask
count
byte
log
[
] |
]
Command Mode
Purpose
CONFIGURATION
Enter the TRACE LIST mode by creating
an trace list.
TRACE LIST
Configure a drop or forward filter.
Configure the following required and
optional parameters:
•
•
•
•
•
•
•
•
•
•
•
Command Mode
Purpose
CONFIGURATION
Create a trace list and assign it a unique
name.
range: 0 to,
sequence-number
4294967290.
ip
: to specify IP as the protocol to filter
for.
ip-protocol-number
range: 0 to 255.
source
: An IP address as the source IP
address for the filter to match.
a network mask
mask:
any
: to match any IP source address
host ip-address:
to match IP addresses
in a host.
destination
: An IP address as the source
IP address for the filter to match.
count:
count packets processed by the
filter.
byte:
count bytes processed by the
filter.
log:
is supported.
Security | 943