[Ipfilter-bugs] [ ipfilter-Feature Requests-3487103 ] expression filters should support logical and

[SourceForge.net <no...@so...>]

Feature Requests item #3487103, was opened at 2012-02-12 13:43
Message generated for change (Settings changed) made by darren_r
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=849056&aid=3487103&group_id=169098

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: tools
Group: 5.1
Status: Open
Resolution: None
>Priority: 6
Private: No
Submitted By: Darren (darren_r)
Assigned to: Nobody/Anonymous (nobody)
Summary: expression filters should support logical and

Initial Comment:
at present, a list of filters separated with ";" on the command line amount to logical or'ing.
so "ip.src=10.2.0.0/16;ip.dst=10.3.0.0/16;" would mean that either property can match for the expression to match.
what's desired is to say both need to match for the condition to hold true.
e.g.
"ip.src=10.2.0.0/16,ip.dst=10.3.0.0/16;"
but consideration should be given as to whether the filter should be constructed more meaningfully, such as:
"(ip.src=10.2.0.0/16 OR ip.dst=10.3.0.0/16) and tcp.port=22"

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=849056&aid=3487103&group_id=169098