Juniper Networks J-Series manual Directional

Chapter 12: Using Services Router Diagnostic Tools

Table 130: CLI monitor traffic Match Conditions (continued)

Match Condition	Description
host [address hostname]	Matches packet headers that contain the specified address or hostname. You can
	preprend any of the following protocol match conditions, followed by a space, to host:
	arp, ip, rarp, or any of the Directional match conditions.
network address	Matches packet headers with source or destination addresses containing the specified
	network address.
network address mask mask	Matches packet headers containing the specified network address and subnet mask.
port [port-number port-name]	Matches packet headers containing the specified source or destination TCP or UDP
	port number or port name.
Directional	Directional match conditions can be prepended to any Entity Type match conditions,
	followed by a space.
destination	Matches packet headers containing the specified destination.
source	Matches packet headers containing the specified source.
source and destination	Matches packet headers containing the specified source and destination.
source or destination	Matches packet headers containing the specified source or destination.
Packet Length
less bytes	Matches packets with lengths less than or equal to the specified value, in bytes.
greater bytes	Matches packets with lengths greater than or equal to the specified value, in bytes.
Protocol
arp	Matches all ARP packets.
ether	Matches all Ethernet frames.
ether [broadcast multicast]	Matches broadcast or multicast Ethernet frames. This match condition can be prepended
	with source or destination.
ether protocol [address (\arp \ip	Matches Ethernet frames with the specified address or protocol type. The arguments
\rarp)	arp, ip, and rarp are also independent match conditions, so they must be preceded with
	a backslash (\) when used in the ether protocol match condition.
icmp	Matches all ICMP packets.
ip	Matches all IP packets.
ip [broadcast multicast]	Matches broadcast or multicast IP packets.
ip protocol [address (\icmp igrp	Matches IP packets with the specified address or protocol type. The arguments icmp,
\tcp \udp)]	tcp, and udp are also independent match conditions, so they must be preceded with
	a backslash (\) when used in the ip protocol match condition.
isis	Matches all IS-IS routing messages.
rarp	Matches all RARP packets.

Using CLI Diagnostic Commands ■ 249