Filter
Top Products
Chapter 45 Packet Flow Filter
ZyWALL (ZLD) CLI Reference Guide
338
45.3 Packet Flow Filter Commands Examples
The following example configures packet flow filter 1 to display how the firewall and policy routes
handle UDP (protocol 17) traffic with source port 123 sent from IP address 1.2.3.4 to IP address
5.6.7.8, port 456. Then it turns on the packet flow filter.
This example displays whether or not the packet flow filter is activated and whether the ring buffer
is enabled or disabled.
exit Leaves the sub-command mode.
[no] packet-flow activate Turns the packet flow filter on or off.
show packet-flow status Displays whether or not the packet flow filter is activated and whether the ring
buffer is enabled or disabled.
show packet-flow buffer
[pf_cpu_core_num]
Displays the details of the captured packet flow.
show packet-flow filter
pf_filter_num_range
Displays the specified packet flow filter’s settings.
packet-flow buffer clear
pf_cpu_core_num
Clears the specified CPU core’s buffer.
packet-flow buffer write Writes buffer content (of all CPU cores) to a file you can download from the FTP /
tmp directory.
[no] packet-flow ring-buffer
activate
Activate the packet flow ring buffer to overwrite the oldest record with the
newest record. Use the no command to stop to capture packet after the buffer is
full.
Table 203 Packet Flow Filter Commands (continued)
COMMAND DESCRIPTION
Router> configure terminal
Router(coonfig)#packet-flow filter 1
Router(coonfig-packet-flow-filter 1)#source 1.2.3.4
Router(coonfig-packet-flow-filter 1)#destination 5.6.7.8
Router(coonfig-packet-flow-filter 1)#src-port 123
Router(coonfig-packet-flow-filter 1)#dst-port 456
Router(coonfig-packet-flow-filter 1)#protocol 17
Router(coonfig-packet-flow-filter 1)#enable
Router(coonfig-packet-flow-filter 1)#exit
Router(config)#packet-flow activate
Router(config)#exit
Router#
Router> show packet-flow status
Packet Flow Debugger Status:
Activation: Yes
Ring Buffer: Disabled