User guide

Reconnex Corporation
60
Release 7.0.0.4
Protocol Option
proto:
Search by protocol
Example
On the Basic Search > Custom line, enter the protocol identifier followed by a protocol:
proto:FTP,HTTP
Dimension Options
Size Option
size:
Search by content size or range
Example
On the Basic Search > Custom line, enter the size identifier followed by a size in kilobytes:
size:1024-2000
Time Option
gmtime:
localtime:
Search by time and date
Example
On the Basic Search > Custom line, enter a local or Greenwich Mean time i
n a text format indicating year, month, date, hour:
gmtime:20040101100000-20041225140000
Port Options
port:
Find traffic entering or leaving this port
sport:
Find source of traffic entering this port
dport:
Find destination of traffic leaving this port
Examples
On the Basic Search > Custom line, enter the port identifier following by a port number:
port: 80,8080 sport: 10,20,80-90 dport: 8080
Content Type Options
cont:
content or object type (format)
Example:
On the Basic Search > Custom line, enter the content type identifier followed by a content type:
cont:MSWord
Concept Options