User's Manual Part 2

SCP-LPS20x-011-012-01H December 20, 2004
170 ADC Telecommunications, Inc.
Filter
Lets you specify a filter expression which controls which packets will be captured by the trace. Leave the filter blank
to trace all packets. The filter expression has the same format and behavior as the expression parameter used by
the well-known TCPDUMP command. Table 16 is a summary of syntax of this command. For more detailed
information, consult one of the many TCPDUMP pages available on the Internet. The filter consists of one or more
primitives. Primitives usually consist of a qualifier followed by an id (number or name).
Table 16. Syntax
Qualifier Description
type Possible values are: host, net, port.
If you do not specify a type qualifier, then host is assumed.
Examples:
host 192.168.30.57
net 128.3
port 20
dir Identifies transfer direction. Possible values are: src, dst, src or dst, src and dst
If you do not specify a dir qualifier, then src or dst is assumed.
Examples:
src 192.168.30.57
dst net 128.3
src or dst port ftp-data
proto Restricts the trace to a particular protocol. Possible values are: ether, ip, arp, rarp, tcp,
udp. If you do not specify a proto qualifier, then all protocols consistent with the supplied
type are assumed.
Examples:
src 192.168.30.57 (implies ip, arp or rarp)
net yahoo.com (implies ip, arp or rarp)
net yahoo.com and port 53 (implies tcp or udp on port 53)