EXPR COMMANDS
494
E-DOC-CTC-20100729-0006 v3.0.Copyright 2011Technicolor. All rights reserved.
This document contains Technicolor proprietary and confidential information. Passing on and copying of this document, use,
extraction and communication of its contents, is not permitted without written authorization from Technicolor.
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstport [!] = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[dstportend = <{undefined|at-echo|at-nbp|
at-rtmp|at-zis|auth|bgp|biff|doom|echo|exec|
finger|ftp|ftp-data|gopher|h323|httpproxy|
ike|ils|imap2|imap3|ingres-net|ipcserver|ipx|
irc-o|irc-u|kerberos|ldap|login|netbios-dgm|
netbios-ns|netbios-ssn|netwall|netware-ip|new-
rwho|nfds|nicname|nntp|ntalk|ntp|pcmail-srv|
pop2|pop3|printer|qotd|realaudio|rip|rtelnet|
rtsp|sip|smtp|snmp|snmptrap|snpp|sntp|sql*net|
sql-net|sqlserv|sunrpc|syslog|systat|talk|
telnet|time|timed|tftp|ulistserv|utime|uucp|
uucp-rlogin|who|www-http|whoami|xwindows} or
number>]
[icmptype [!] = <{echo-reply|destination-
unreachable|source-quench|redirect|exceeded|
parameter-problems|timestamp-request|
timestamp-reply|information-request|
information-reply|address-mask-request|
address-mask-reply} or number>]
[icmpcode [!] = <number{0-15}>]
[icmpcodeend = <number{0-15}>]
iplengthmin [!] = <number>
[iplengthmax = <number>]
where:
name The name of an expression to modify. REQUIRED
type The type of an expression. OPTIONAL
index The index of a subexpression. REQUIRED
mac [!] The MAC address.
If a value is preceded by a “!”, it means NOT.
REQUIRED
addr [!] The IP address or range.
If a value is preceded by a “!”, it means NOT.
REQUIRED