Check Point UTM-1 Edge - Page 633

Using Diagnostic Tools
Chapter 19: Maintenance 619
EXAMPLE 1
The following filter string captures all TCP packets:
tcp
EXAMPLE 2
The following filter string captures all TCP packets destined for port 80:
tcp dst port 80
udp
PURPOSE
The udp element captures all UDP packets. This element can be prepended to port-related
elements.
Note: When not prepended to other elements, the
udp element is the equivalent of
ip proto udp.
SYNTAX
udp
udp element
P
ARAMETERS
element
String. A port-related filter string element that should be
restricted to saving only UDP packets. This can be the
following:
•
dst port - Capture all UDP packets destined
for a specific port.
• port - Captures all UDP packets originating
from or destined for a specific port.
• src port - Capture all UDP packets
originating from a specific port.