EXPR COMMANDS
where:
name
type
index
mac [!]
addr [!]
mask [
430
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstport [!] = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstportend = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[icmptype [!] = <{echo-reply|destination-
unreachable|source-quench|redirect|exceeded|
parameter-problems|timestamp-request|
timestamp-reply|information-request|
information-reply|address-mask-request|
address-mask-reply} or number>]
[icmpcode [!] = <number{0-15}>]
[icmpcodeend = <number{0-15}>]
iplengthmin [!] = <er{0-15}>
[iplengthmax = <er{0-15}>]
The name of an expression to modify.
The type of an expression.
The index of a subexpression.
The MAC address.
If a value is preceded by a "!", it means NOT.
The IP address or range.
If a value is preceded by a "!", it means NOT.
The IP mask (ignored if an IP range is provided).
This document contains Technicolor proprietary and confidential information. Passing on and copying of this document, use,
extraction and communication of its contents, is not permitted without written authorization from Technicolor.
DMS-CTC-20101206-0049 v1.0.Copyright 2011Technicolor. All rights reserved.
REQUIRED
OPTIONAL
REQUIRED
REQUIRED
REQUIRED
OPTIONAL