User`s guide

Protocol Analyzer
Building a Filter
5967–9446 377
<filter.spec> ::= <filter.expr>
| null
<filter.expr> ::= <filter.expr> or <filter.fact>
| <filter.fact>
<filter.fact> ::= <filter.fact> and <filter.term>
| <filter.term>
<filter.term> ::= between <host.spec> <host.spec>
| dst-host <host.spec>
| dst-proto <proto.spec>
| host <host.spec>
| not <filter.term>
| pattern offset num <pattern.op> hexstring
<mask.spec>
| proto <proto.spec>
| src-host <host.spec>
| src-proto <proto.spec>
| status <status.spec>
| (<filter.expr>)
<host.spec> ::= <host.type> <host>
<host.type> ::= DDP
| DNAR
| ETHER
| IDP
| IP
| VINES
<host> ::= hostname
| hostaddr
<byte.offset> ::= num
| hexnum
<byte.op> ::= &
| |
| =
<byte.value> ::= num
| hexnum
<proto.spec> ::= <proto.level> <proto.value>
See page 379 for
a description of
these terms