Version 6.6 399 MP-11x & MP-124
User's Manual 38. Syslog and Debug Recordings
Expression Description
udp.srcport, tcp.srcport Transport layer for source port
udp.dstport, tcp.dstport Transport layer for destination port
and, &&, ==, <, > Between expressions
Below are examples of configured expressions for the 'Value' parameter:
udp && ip.addr==10.8.6.55
ip.src==10.8.6.55 && udp.port>=5000 and udp.port<6000
ip.addr==10.8.6.40
For conditions requiring the "or" / "||" expression, add multiple table rows. For example, the
Wireshark condition "(ip.src == 1.1.1.1 or ip.src == 2.2.2.2) and ip.dst == 3.3.3.3" can be
configured using the following two table row entries:
1. ip.src == 1.1.1.1 and ip.dst == 3.3.3.3
2. ip.src == 2.2.2.2 and ip.dst == 3.3.3.3
Note: If the 'Value' field is left empty, the device will record all IP traffic types.
To Next Page
Loading...
