ipv4 flow;
}
flow {
- route {
- match {
- source 10.0.0.1/32;
- destination 192.168.0.1/32;
- port =80;
- destination-port >8080&<8088;
- source-port >1024;
- protocol tcp;
- packet-length >400&<500;
- fragment first-fragment;
- icmp-type echo-reply;
- icmp-code network-unreachable;
- tcp-flags urgent;
- dscp 20;
-
- }
- then {
- action sample-terminal;
- }
- }
+ route flow1 {
+ match {
+ source 10.0.0.1/32;
+ destination 192.168.0.1/32;
+ port =80;
+ destination-port [ >8080&<8088 ];
+ source-port >1024;
+ protocol tcp;
+ packet-length [ >400&<500 ];
+ fragment =first-fragment;
+ icmp-type echo-reply;
+ icmp-code network-unreachable;
+ tcp-flags =urgent;
+ dscp 20;
+ }
+ then {
+ action sample-terminal;
+ }
+ }
}
}