[Ipfilter-bugs] [ ipfilter-Feature Requests-3487103 ] expression filters should support logical and
Brought to you by:
darren_r
|
From: SourceForge.net <no...@so...> - 2012-08-09 15:27:52
|
Feature Requests item #3487103, was opened at 2012-02-12 13:43 Message generated for change (Settings changed) made by darren_r You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=849056&aid=3487103&group_id=169098 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: tools Group: 5.1 Status: Open Resolution: None >Priority: 6 Private: No Submitted By: Darren (darren_r) Assigned to: Nobody/Anonymous (nobody) Summary: expression filters should support logical and Initial Comment: at present, a list of filters separated with ";" on the command line amount to logical or'ing. so "ip.src=10.2.0.0/16;ip.dst=10.3.0.0/16;" would mean that either property can match for the expression to match. what's desired is to say both need to match for the condition to hold true. e.g. "ip.src=10.2.0.0/16,ip.dst=10.3.0.0/16;" but consideration should be given as to whether the filter should be constructed more meaningfully, such as: "(ip.src=10.2.0.0/16 OR ip.dst=10.3.0.0/16) and tcp.port=22" ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=849056&aid=3487103&group_id=169098 |