Chapter 2 - Features set
User Manual
R5000 series - Web GUI
58
ether
multicast
True if the packet is an Ethernet multicast (or broadcast)
packet
The
ether
keyword is optional
This is shorthand for
“ether[0] & 1 != 0”
ip
multicast
True if the packet is an IPv4 multicast (or broadcast)
packet
ether
proto
protocol
True if the packet is of ether type
protocol
Protocol can be a number or one of the names
ip
,
ip6
,
arp
,
rarp
,
atalk
,
aarp
,
sca
,
lat
,
mopdl
,
moprc
,
iso
,
stp
,
ipx
,
or
netbeui
These identifiers are also keywords and must be escaped
via backslash (\)
In the case of Ethernet, WANFleX checks the Ethernet
type field for most of those protocols
The exceptions are:
-
iso
,
stp
, and
netbeui
WANFleX checks for an 802.3 frame and then checks
the LLC header as it does for FDDI, Token Ring, and
802.11
-
atalk
WANFleX checks both for the AppleTalk etype in an
Ethernet frame and for a SNAP-format packet as it
does for FDDI, Token Ring, and 802.11
-
aarp
WANFleX checks for the AppleTalk ARP etype in
either an Ethernet frame or an 802.2 SNAP frame with
an OUI of 0x000000
-
ipx
WANFleX checks for the IPX etype in an Ethernet
frame, the IPX DSAP in the LLC header, the 802.3-
with-no-LLC-header encapsulation of IPX, and the
IPX etype in a SNAP frame
ip
,
arp
,
rarp
,
atalk
,
aarp
,
iso
,
stp
,
ipx
,
netbeui
Abbreviations for “ether proto p”, where “
p
” is one of the
above protocols
svlan
[vlan_id]
True if the packet is an IEEE 802.1Q Service VLAN packet
(ether proto 0x88a8)