| firewall flows | Notifies a session has been established |
| filter | Optional. Defines additional firewall flow filter parameters |
| dir [wired-wired| wired-wireless| wireless-wired| wireless-wireless] | Optional. Matches the packet flow direction- wired-wired – Wired to wired flows
- wired-wireless – Wired to wireless flows
- wireless-wired – Wireless to wired flows
- wireless-wireless – Wireless to wireless flows
|
| dst port <1-65535> | Optional. Matches the destination port with the specified port- port <1-65535> – Specifies the destination port number from 1 - 65535
|
| ether [dst <MAC>| host <MAC>| src <MAC>| vlan <1-4094>] | Optional. Displays Ethernet filter options- dst <MAC> – Matches only the destination MAC address
- host <MAC> – Matches flows containing the specified MAC address
- src <MAC> – Matches only the source MAC address
- vlan <1-4094> – Matches the VLAN number of the traffic with the specified value. Specify a value from 1- 4094.
|
| flow-type [bridged|natted|routed| wired|wireless] | Optional. Matches the traffic flow type- bridged – Bridged flows
- natted – Natted flows
- routed – Routed flows
- wired – Flows belonging to wired hosts
- wireless – Flows containing a mobile unit
|
| icmp {code|type} | Optional. Matches flows with the specified Internet Control Message Protocol (ICMP) version 4 code and type- code – Matches flows with the specified ICMPv4 code
- type – Matches flows with the specified ICMPv4 type
|
| icmpv6 {code|type} | Optional. Matches flows with the specified ICMP version 6 code and type- code – Optional. Matches flows with the specified ICMPv6 code
- type – Optional. Matches flows with the specified ICMPv6 type
|
| igmp | Optional. Matches Internet Group Management Protocol (IGMP) flows |
| ip [dst <IP>| host <IP>| proto <0-254>| src <IP>] | Optional. Filters firewall flows based on the IPv4 parameters passed- dst <IP> – Matches destination IP address
- host <IP> – Matches flows containing IPv4 address
- proto <0-254> – Matches the IPv4 protocol number with the specified number
- src <IPv4> – Matches source IP address
|
| ipv6 [dst <IPv6>| host <IPv6>| proto <0-254>| src <IPv6>] | Optional. Filters firewall flows based on the IPv6 parameters passed- dst <IPv6> – Matches destination IPv6 address
- host <IPv6> – Matches flows containing IPv6 address
- proto <0-254> – Matches the IPv6 protocol number with the specified number
- src <IPv6> – Matches source IPv6 address
|
| max-idle <1-4294967295> | Optional. Filters firewall flows idle for at least the specified duration. Specify a max-idle value from 1 - 4294967295 bytes. |
| min-bytes <1-4294967295> | Optional. Filters firewall flows with at least the specified number of bytes. Specify a min-bytes value from 1 - 4294967295 bytes. |
| min-idle <1-4294967295> | Optional. Filters firewall flows idle for at least the specified duration. Specify a min-idle value from 1 - 4294967295 bytes. |
| min-pkts <1-4294967295> | Optional. Filters firewall flows with at least the given number of packets. Specify a min-bytes value from 1 - 4294967295 bytes. |
| not | Optional. Negates the filter expression selected |
| port <1-65535> | Optional. Matches either the source or destination port. Specify a port from 1 - 65535. |
| src <1-65535> | Optional. Matches only the source port with the specified port. Specify a port from 1 - 65535. |
| tcp | Optional. Matches TCP flows |
| udp | Optional. Matches UDP flows |
