1,775
edits
L7 module: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 89: | Line 89: | ||
* Name: this is the identifier used in all statistics and layer 7 specific filters. An unique name must be chosen. | * Name: this is the identifier used in all statistics and layer 7 specific filters. An unique name must be chosen. | ||
* Description: the description is purely informational and is shown in the detailed statistics for that protocol. | * Description: the description is purely informational and is shown in the detailed statistics for that protocol. | ||
This field can be used for a detailed description what kind of traffic the protocol covers. | :This field can be used for a detailed description what kind of traffic the protocol covers. | ||
* Layer 4 protocol: The protocol may match any IP traffic but also can be limited to just TCP or UDP traffic. | * Layer 4 protocol: The protocol may match any IP traffic but also can be limited to just TCP or UDP traffic. | ||
For performance it is recommended to choose either option if this is applicable as only part of the traffic need to be checked against the other matching rules. | :For performance it is recommended to choose either option if this is applicable as only part of the traffic need to be checked against the other matching rules. | ||
* IPs: An IP address can be entered or a subnet using the subnet size parameter. The source and destination | * IPs: An IP address can be entered or a subnet using the subnet size parameter. The source and destination | ||
IP address of a network packet is used to match the list of IP addresses. | IP address of a network packet is used to match the list of IP addresses. | ||
– 1.2.3.4 | Example values are: | ||
:– 1.2.3.4 | |||
meaning exactly the IP 1.2.3.4 | meaning exactly the IP 1.2.3.4 | ||
:– 1.2.3.0/24 | |||
– 1.2.3.0/24 | |||
this matches any IP between 1.2.3.0 and 1.2.3.255 | this matches any IP between 1.2.3.0 and 1.2.3.255 | ||
| Line 107: | Line 107: | ||
Up to 16 IP addresses may be used so that at least one item on the list must match. | Up to 16 IP addresses may be used so that at least one item on the list must match. | ||
* Ports: TCP or UDP ports may be used to match traffic. The source and the destination port is used to match the list of ports. Individual ports or port ranges can be used. | * Ports: TCP or UDP ports may be used to match traffic. The source and the destination port is used to match the list of ports. Individual ports or port ranges can be used. | ||
– 80 | Example values are: | ||
:– 80 | |||
meaning exactly port 80 | meaning exactly port 80 | ||
:– 100-200 | |||
– 100-200 | |||
matches any port between 100 and 200 | matches any port between 100 and 200 | ||
| Line 160: | Line 160: | ||
* This button imports the configuration file selected with the ‘Choose file’ button into the browser configuration. | * This button imports the configuration file selected with the ‘Choose file’ button into the browser configuration. | ||
The imported configuration must be saved to take effect. | :The imported configuration must be saved to take effect. | ||
{| | {| | ||
|[[File:Import.png|300px|right]] | |[[File:Import.png|300px|right]] | ||
| Line 171: | Line 171: | ||
* '''Layer 4 drop down box: Select the layer 4 protocol from the list of possible values.''' | * '''Layer 4 drop down box: Select the layer 4 protocol from the list of possible values.''' | ||
* This button adds another IP address or port to the corresponding list. | * This button adds another IP address or port to the corresponding list. | ||
{| | {| | ||