1,775
edits
Capture module: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 169: | Line 169: | ||
|- | |- | ||
|} | |} | ||
will match a connection from 10.0.0.1 to 10.1.0.1 or vice versa with the ports 1234 and 9876 involved. | |||
* The expression | * The expression | ||
| Line 178: | Line 178: | ||
|- | |- | ||
|} | |} | ||
will match packets having 10.0.0.1 either as source or destination. If a communication peer of 10.0.0.1 is 10.0.0.2 the packets will not be captured. | |||
* The expression | * The expression | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
| Line 187: | Line 187: | ||
|- | |- | ||
|} | |} | ||
will match packets with ICMP or ICMPv6 layer 4 protocols. | |||
* The expression | * The expression | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
| Line 196: | Line 196: | ||
|- | |- | ||
|} | |} | ||
will match packets to or from port 80 or 443. | will match packets to or from port 80 or 443. | ||