User guide

set filter
114 Chapter 2 Command Descriptions
range=range
An entry or range of entries in the filters table.
show={on|off}
on
Stanzas from the filter identified on the "name" option will be
displayed.
off
Stanzas from the filter identified on the "name" option will not be
displayed.
The default is "off."
src Source IP packet options, such as IP addresses, ports, or host
names.
syn Start filtering when the start of a TCP data stream is
encountered. This option is always used with the "fin" option
and is used to trigger logging ("logpacket" option on the
"set user" command).
fin Stop filtering when the end of a TCP data stream is
encountered. This value is always used with the "syn" option
and ends logging ("logpacket" option on the "set user"
command.).
tcp TCP packets.
udp UDP packets.
icmp ICMP packets. You can also specify a type of ICMP packet. To
do so, specify "s1=type/icmp" where type is the identifier type
of ICMP packet, which can be any of the following identifiers:
• Echo reply: 0
• Destination unreachable: 3
• Source quench: 4
• Redirect: 5
• Echo request: 8
• Time exceeded for a datagram: 11
• Parameter problem on a datagram: 12
• Timestamp request: 13
• Timestamp reply: 14
• Address mask request: 17
• Address mask reply: 18
! (exclamation) When a packet is encountered that meets stanza criteria, the
filter does not execute the filter function (for example, bringing
up a connection) and it does not process any more stanzas.
Token Value Filter Criteria