Avaya G430 - Page 387

Configuring rule criteria for a capture list
Procedure
Use the composite-operation command to include a composite operation in a rule
for a capture list.
For example, the following commands create a rule (rule 10 in capture list 510) that
determines that TCP packets are not captured:
Gxxx-001(super)# ip capture-list 510
Gxxx-001(super-Capture 510)# ip-rule 10
Gxxx-001(super-Capture 510/ip rule 10)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 510/ip rule 10)# ip-protocol tcp
Done!
Gxxx-001(super-Capture 510/ip rule 10)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 510/ip rule 10)# ip-protocol tcp
Done!
Gxxx-001(super-Capture 510/ip rule 10)#
Related topics:
Rule applications on page 387
Rule criteria commands on page 388
Applying rules to packets with DSCP values on page 388
Applying rules to packets with IP protocols on page 389
Applying rules to source or destination IP address on page 389
IP range criteria on page 389
Commands used to specify a range of source and destination ports on page 390
Port name or number range criteria on page 390
Applying rules to ICMP on page 391
Fragment command on page 391
Capture list example on page 392
Rule applications
Rules work in the following ways, depending on the type of information in the packet, and the
number of criteria in the rule:
• L4 rules with a Permit operation are applied to non-initial fragments
• L4 rules with a Deny operation are not applied to non-initial fragments, and the device
continues checking the next IP rule. This is to prevent cases in which fragments that
belong to other L4 sessions may be blocked by the other L4 session which is blocked.
• L3 rules apply to non-initial fragments
• L3 rules that include the fragment criteria do not apply to initial fragments or non-fragment
packets
Monitoring applications
Administering Avaya G430 Branch Gateway October 2013 387