Chapter 5
Packet Classification and Labelling
E-NIT-CTC-20041213-0013v0.5
44
SrcipDstipServ
Srcip values Description
private, ssdp_ip,
mdap_ip, _10.0.0.138,
_192.168.1.254
The srcip parameter is used to the source address of
the packet, this can be any ip address. If the source ip
parameter is left open any source address is valid.
Dstip values Description
private, ssdp_ip,
mdap_ip, _10.0.0.138,
_192.168.1.254
The dstip parameter specifies the destination address
of the packet.
This can be used for point to point connections.
If the dstip parameter is left open any destination
address is valid.
Serv values Description
HTTP_sv_0,
HTTPs_sv_0, FTP_sv_0,
TELNET_sv_0,
RIP_sv_0,
RIP_Query_sv_0,
DNS_S_sv_0,
DHCP_R_sv_0,
DHCP_S_sv_0,
SNMP_AGENT_sv_0,
SSDP_sv_0,
MDAP_sv_0,
RAS_sv_0, SRAS_sv_0,
ICMP_LISTEN_sv_0,
SENDTO_LISTEN_sv_0,
PING_RESPONDER_sv_
0, icmp, igmp, ftp,
telnet, http, httpproxy,
https, RPC, NBT, SMB,
imap, imap3, imap4-ssl,
imaps, pop2, pop3,
pop3s, smtp, ssh, dns,
nntp, ipsec, esp, ah,
ike, DiffServ, sip, h323,
dhcp, rtsp, ssdp_serv,
mdap_serv, syslog,
HTTPI_sv_0
The serv parameter defines the service used, this can
be any given service or a specific service like HTTP,
FTP, TELNET etc. These services can be defined in the
expression command group wich will be explained in
detail further on.