User guide

Using Diagnostic Tools

356 Check Point ZoneAlarm User Guide

PARAMETERS

port

Integer. The port from which the packet is sent.

EXAMPLE

The following filter string saves packets that originated from port 80:

src port 80

tcp

PURPOSE

The tcp element captures all TCP packets. This element can be prepended to port-related

elements.

Note: When not prepended to other elements, the

tcp element is the equivalent of

ip proto tcp.

SYNTAX

tcp

tcp element

ARAMETERS

element

String. A port-related filter string element that should be

restricted to saving only TCP packets. This can be the

following:

•

dst port - Capture all TCP packets destined

for a specific port.

• port - Capture all TCP packets originating from

or destined for a specific port.

• src port - Capture all TCP packets originating

from a specific port.